# Output of: ipsec auto --status |egrep '(algo.*IKE|uml2-obsd)' # highlighted with ">>>" prefix (for relevant IKE blowfish) # >>> 000 algorithm IKE encrypt: id=3, name=OAKLEY_BLOWFISH_CBC, blocksize=8, keydeflen=128 000 algorithm IKE encrypt: id=7, name=OAKLEY_AES_CBC, blocksize=16, keydeflen=128 000 algorithm IKE encrypt: id=5, name=OAKLEY_3DES_CBC, blocksize=8, keydeflen=192 000 algorithm IKE hash: id=6, name=OAKLEY_SHA2_512, hashsize=64 000 algorithm IKE hash: id=4, name=OAKLEY_SHA2_256, hashsize=32 000 algorithm IKE hash: id=2, name=OAKLEY_SHA, hashsize=20 000 algorithm IKE hash: id=1, name=OAKLEY_MD5, hashsize=16 000 algorithm IKE dh group: id=2, name=OAKLEY_GROUP_MODP1024, bits=1024 000 algorithm IKE dh group: id=5, name=OAKLEY_GROUP_MODP1536 (extension), bits=1536 000 algorithm IKE dh group: id=42048, name=OAKLEY_GROUP_MODP2048 (extension), bits=2048 000 algorithm IKE dh group: id=43072, name=OAKLEY_GROUP_MODP3072 (extension), bits=3072 000 algorithm IKE dh group: id=44096, name=OAKLEY_GROUP_MODP4096 (extension), bits=4096 000 "uml2-obsd": 10.1.20.0/24===192.168.2.20...192.168.2.13===10.1.13.0/24 000 "uml2-obsd": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0 000 "uml2-obsd": policy: PSK+ENCRYPT+TUNNEL+PFS+DISABLEARRIVALCHECK; interface: eth0; erouted 000 "uml2-obsd": newest ISAKMP SA: #13; newest IPsec SA: #14; eroute owner: #14 >>> 000 "uml2-obsd": IKE algorithms wanted: 3_128-2-5, 3_128-2-2, flags=-strict >>> 000 "uml2-obsd": IKE algorithms found: 3_128-2_160-5, 3_128-2_160-2, >>> 000 "uml2-obsd": IKE algorithm newest: BLOWFISH_CBC_128-SHA-MODP1024 000 "uml2-obsd": ESP algorithms wanted: 12_256-2, flags=-strict 000 "uml2-obsd": ESP algorithms loaded: 12_256-2_160, 000 "uml2-obsd": ESP algorithm newest: AES_256-HMAC_SHA1; pfsgroup= 000 #14: "uml2-obsd" STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 27579s; newest IPSEC; eroute owner 000 #14: "uml2-obsd" esp.feeb28ed@192.168.2.13 esp.206ba768@192.168.2.20 tun.100c@192.168.2.13 tun.100b@192.168.2.20 000 #13: "uml2-obsd" STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 1970s; newest ISAKMP