[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipsec-tools-devel
Subject:    Re: [Ipsec-tools-devel] [ipsec-tools_0.6.6] Bug with NAT-T
From:       manu () netbsd ! org (Emmanuel Dreyfus)
Date:       2007-06-25 19:53:03
Message-ID: 1i0a9zu.w3r84d1e4qx0eM%manu () netbsd ! org
[Download RAW message or body]

VANHULLEBUS Yvan <vanhu@free.fr> wrote:

> > if I enable NAT-T support with "./configure --enable-natt", but without
> > putting the directive "nat_traversal on" in the config file, racoon
> > doesn't succeed in negotiating SAs in transport mode with ah between two
> > hosts connected by a crossover cable.
> 
> Well, I guess AH is not widely tested by most people (including the
> dev team, and including myself....).

Yes, and situations where AH is really usefull are scarce: most of the
time, ESP will null_enc will do the same job.

-- 
Emmanuel Dreyfus
http://hcpnet.free.fr/pubz
manu@netbsd.org

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Ipsec-tools-devel mailing list
Ipsec-tools-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/ipsec-tools-devel
[prev in list] [next in list] [prev in thread] [next in thread]