Problem with IPSEC transport

[Luc MAIGNAN]

Hi,

I want to establish an IPSEC tunnel between a fedora box and a NETASQ 
router.

The router doesn't support AH transport, just ESP.

So I try to disable it by setting :


AH_PROTO=none

in the ifcfg-ipsec0 file.



but it doesn't work !
In the log file, I can see :

pfkey GETSPI succeeded: AH/Transport 
8x.xxx.xx.xx[500]->192.168.50.181[500] spi=30486826(0x1d1312a)


Can anyone help me to give me a way to DISABLED the AH proto ?


Best regards