Re: IPSec in 2.5 Kernel?

"John S. Denker" <[email protected]> writes:

> I'm delighted to hear it.
> 
> But tell me, how does my security policy get set up
> when my peers have non-static addresses?  I know
> about racoon's generate_policy option as mentioned
> in e.g.

Ok, I just looked at the code and tracked down what was going
on here.  Unfortunately it appears that no, there is no way
to set up multiple "anonymous" sessions -- and racoon has
no concept of a "road warrior".  It assumes that IDs are
IP Addresses.

I'll work to fix that.

-derek

-- 
       Derek Atkins
       Computer and Internet Security Consultant
       [email protected]             www.ihtfp.com