PATCH: nat on ipsec for iked

2015-03-17 Thread Vincent Gross
Hi, The diff below bring into iked the same nat capabilities that isakmpd already has. Tested on a daily basis to tunnel from work to home over UMTS. Comments ? -- Vincent Gross Index: iked.h === RCS file: /cvs/src/sbin/iked/iked

Re: PATCH: NAT on IPSec

2015-01-26 Thread Vincent Gross
On Thu, Jan 15, 2015 at 04:00:20PM +0100, Vincent Gross wrote: > Hello folks, > > This patch brings nat capabilites into iked, the same way that mpf@ did > with isakmpd about 6 years ago. > > Comments ? bumpity bump bump. Any comments on this ? > > Tested with the following setup, with icmp,

PATCH: NAT on IPSec

2015-01-15 Thread Vincent Gross
Hello folks, This patch brings nat capabilites into iked, the same way that mpf@ did with isakmpd about 6 years ago. Comments ? Tested with the following setup, with icmp, udp and tcp: >> Local pf.conf: table { 172.23.0.0/23 } set skip on lo match out on enc0 from ! to nat-to 172.23.50.1