Re: AF_KEY extended xfrm_state selector handling

2006-10-20 Thread David Miller
From: Michal Růžička <[EMAIL PROTECTED]> Date: Fri, 20 Oct 2006 10:56:13 +0200 > - Do you suggest that there is another IKE implemetation for Linux 2.6 IPSec > stack which uses netlink socket (XFRM) for kernel communication? If so, > would you please point me to it? OpenSWAN is an IKE implement

Re: AF_KEY extended xfrm_state selector handling

2006-10-20 Thread Michal Růžička
BTW, why not use xfrm instead? Then you dont have to worry about racoon. What do you mean by this? - Do you suggest that there is another IKE implemetation for Linux 2.6 IPSec stack which uses netlink socket (XFRM) for kernel communication? If so, would you please point me to it? Or - Do y

Re: AF_KEY extended xfrm_state selector handling

2006-10-19 Thread jamal
On Thu, 2006-19-10 at 18:26 +0100, Michal Ruzicka wrote: > Hello > > In an effort to configure an L2TP/IPsec server on Linux capable of supporting > multiple clients behind a single NAT device I ran into difficulties with > pf_key > protocol implementation not being able to exploit all the inform

AF_KEY extended xfrm_state selector handling

2006-10-19 Thread Michal Ruzicka
Hello In an effort to configure an L2TP/IPsec server on Linux capable of supporting multiple clients behind a single NAT device I ran into difficulties with pf_key protocol implementation not being able to exploit all the information passed to it as a SADB_EXT_ADDRESS_PROXY info. Perhaps as the or