Use DSA instead of ElGamal signature scheme.
Too many errors that can be implemented with the implementation of ElGamal. One of these errors is what GregS suggested: use IKE options. These parameters were generated for ElGamal encryption, and not for the signature scheme. These two schemes have clear requirements. In particular, using g = 2 as a generator is a good choice for encryption, but a very poor choice for a signature scheme. (See, for example, "Applied Cryptography Handbook" http://www.cacr.math.uwaterloo.ca/hac/ note 11.67 in chapter 11 for some details). It would be right to choose a generator randomly. But again, if you just use DSA, you can simply avoid these errors by following the standard.
: OpenPGP http://tools.ietf.org/html/rfc4880, ElGamal, . , DSA : , . , PGP, , , .