[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snap-users
Subject:    (KAME-snap 4340) IPsec policy based on protocol
From:       "Koster, R.P." <R.P.Koster () kpn ! com>
Date:       2001-03-27 13:08:04
[Download RAW message or body]

It seems that IPsec policies can only be specified for the UDP and TCP
protocol or ANY protocol. Why is there no support for other IP protocols
(like Windows 2000 does for example) like ICMP (#1) or RSVP (#46)?

It is possible to add such filters to the SPD but behaviour is not as
expected: core dump in case of ICMP, RSVP is left unprotected.

Will there be any support in the future for other IP protocols in Kame? It
does not seem a big step if support for TCP and UDP is already there and
there are no such things as source and destination port numbers.

Regards,
Paul

[prev in list] [next in list] [prev in thread] [next in thread]