Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 08 Nov 2001 08:57:18 -0600
From:      Matthew Reimer <mreimer@vpop.net>
To:        freebsd-security@freebsd.org
Subject:   Re: KAME IPsec on low-end hardware
Message-ID:  <3BEA9D4E.83E069EB@vpop.net>
References:  <lists.freebsd.security.20011108140840L.sakane@kame.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Does compression work with tunnels? If so, could you give an example SPD
that demonstrates this?

Thanks for all your ipsec work!

Matt

Shoichi Sakane wrote:
> 
> > I suspect that compression would also affect response times, but
> > omitting:
> >
> >   compression_algorithm deflate;
> >
> > from racoon.conf results in a parse error. Does anyone know if
> > compression can be disabled?
> 
> "compression_algorithm deflate;" is just a information.
> the compression algorithm would not be used when it was
> in the configuration file.  when you define ipcomp to the SPD, then
> the compression will be used.
> 
> > Also, is there much difference between racoon and isakmpd? AFAICT
> > isakmpd supports dymamic client IP addresses, but that seems to be the
> > only major difference.
> 
> racoon can do too.
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-security" in the body of the message

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3BEA9D4E.83E069EB>