Re: xfrm selector generating IKE
From: Herbert Xu <herbert@gondor.apana.org.au>
Date: 2009-02-24 02:08:54
From: Herbert Xu <herbert@gondor.apana.org.au>
Date: 2009-02-24 02:08:54
On Mon, Feb 23, 2009 at 05:31:29PM -0800, Paul Moore wrote:
Do you know which version of *swan generates xfrm selectors when it does an SA ADD or UPDATE. I downloaded openswan 2.6.19 and it does not
The selector logic doesn't work very well with nested tunnels which is why I didn't use it for the original Openswan port. We rely on the policy selector instead to do the job. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} [off-list ref] Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt