List Info

Thread: MODECFG/IKECFG/MODE CONFIG openswan server and third party clients




MODECFG/IKECFG/MODE CONFIG openswan server and third party clients
user name
2006-12-06 09:40:29
Hi,

Thanks for attention.
The reason I put the patch on dev mailing list, was to
provide a way I
managed to do it, to anyone who may be struggling with the
same
problem.

I do know that the patch breaks few things (openswan
_client_
compatibility, also discarding QUICK MODE packets till the
mode config
is done is not the best idea - but was the only quick fix
for
softremote I could figure out).
I also hope someone more more familiar with openswan code
would find a
better way of doing things.

>   Well, openswan interoperates with multiple cisco
implementations that
> were done by the authors of the ikecfg draft.
Is there anyone who has seen modeconfig in operation on
cisco?
I am curious to know if modeconfig payload is sent encrypted
there
(which seems to be the only reasonable way) or not (which is
also
supported according to the draft).

>   Please don't make me fish on your blog for the
explanation.
>   Post it here as text.
Will remember next time -
* I thought the text + patch may be too long, thus
unreadable to put in an email
* wasn't sure if this would get any attention, so I just put
a short
story on dev mailing list with a reference.
Thanks for Paul comments too - now I understand it was
unreadable the
way I provided it 



Regards!

A.
_______________________________________________
Dev mailing list
Devopenswan.org
http:/
/lists.openswan.org/mailman/listinfo/dev
[1]

about | contact  Other archives ( Real Estate discussion Medical topics )