Re: [design] [FreeSWAN+SuSE 9.0+ipsec+tunnel+ipv6]

Dear Sam,

you are right.

After receiving your mail, I took a closer look at what is available in /pr=
oc/net and /proc/sys/net. There are entries that lead to the conclusion tha=
t IPsec is supported in the SuSE 9.0 kernel for IPv4 and IPv6.
I am not sure what the use of the modules ipsec.o is. If loaded, it tells i=
n /var/log/messages that it "Initializes IPsec4; based on FreeSWAN 1.98b). =
Perhaps it is possible with this modules to disable USAGI kernel Ipsec and =
enable FreeSWAN IPsec which can provide the virtual ipsec interface.

I have not yet had the time to dig into the necessary scripts and to find o=
ut if they are ready to establish IPv6 connections and how the address fami=
ly is then indicated in ipsec.conf.

Cheers,

	Gerhard

--------------------------------------------
Gerhard Ge=DFler

Communication Networks, IABG mbH
Einsteinstr. 20
85521 Ottobrunn, Germany

Telefon: +49 89 6088 - 2021
Fax: +49 89 6088 - 2845

E-Mail: [email protected]=20

  > -----Original Message-----
  > From: Sam Sgro [mailto:[email protected]]=20
  > Sent: Thursday, February 05, 2004 6:29 PM
  > To: [email protected]; Gessler Gerhard; GIANLUCA=20
  > BERRETTI; [email protected]
  > Subject: Re: [Users] [design] [FreeSWAN+SuSE 9.0+ipsec+tunnel+ipv6]
  >=20
  >=20
  > -----BEGIN PGP SIGNED MESSAGE-----
  >=20
  > On Thursday 05 February 2004 11:34, Gessler Gerhard wrote:
  > > Are you sure that the FreeSWAN package shipped with SuSE=20
  > 9.0 supports IPv6?
  >=20
  > SuSE 9.0 shipped with the USAGI IPsec kernel code, so they=20
  > could meet the CGL=20
  > standard. Kurt Garloff's page provides modified FreeS/WAN 1.99
  > packages which also have "Rudimentary IPv6 support in Pluto".
  >=20
http://www.suse.de/~garloff/linux/FreeSWAN/

I assume SuSE shipped Kurt's packages.

- --=20
Sam Sgro
[email protected]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (GNU/Linux)

iQCVAwUBQCJ9cUOSC4btEQUtAQHUWwP/R5Rcp0I4Tiss2nJsMDZLAqIMZTUQ+WEj
1mG2eWF6YfVp/RO44wrGbMKBiFEe6Rzwk5JIWseiccs+dxSjrsLBkvIGuGRMOfMn
cyQvakfiGDcaQ4uhZX6JZHPsY+7EfwzK+6kH+5CmlMRDD3K1iNjCUnZRfHhlQAxz
Rp8yvZ6TzRk=3D
=3Dti+J
-----END PGP SIGNATURE-----