From owner-freebsd-net Fri Apr 19 10:30:14 2002 Delivered-To: freebsd-net@freebsd.org Received: from InterJet.dellroad.org (adsl-63-194-81-26.dsl.snfc21.pacbell.net [63.194.81.26]) by hub.freebsd.org (Postfix) with ESMTP id 30E4E37B41A for ; Fri, 19 Apr 2002 10:30:03 -0700 (PDT) Received: from arch20m.dellroad.org (arch20m.dellroad.org [10.1.1.20]) by InterJet.dellroad.org (8.9.1a/8.9.1) with ESMTP id KAA75319; Fri, 19 Apr 2002 10:18:01 -0700 (PDT) Received: (from archie@localhost) by arch20m.dellroad.org (8.11.6/8.11.6) id g3JHGjI41280; Fri, 19 Apr 2002 10:16:45 -0700 (PDT) (envelope-from archie) From: Archie Cobbs Message-Id: <200204191716.g3JHGjI41280@arch20m.dellroad.org> Subject: Re: xauth support in ipsec ? In-Reply-To: <003a01c1e66c$deff1500$bb5bf7a5@compaq> "from Naga R Narayanaswamy at Apr 17, 2002 08:06:20 pm" To: Naga R Narayanaswamy Date: Fri, 19 Apr 2002 10:16:45 -0700 (PDT) Cc: freebsd-net@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL88 (25)] MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset=US-ASCII Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Naga R Narayanaswamy writes: > Probably this mail should be directed at the kame newsgroup. But > anyone know if xauth authorization scheme which is in draft stage > is incorporated in the ipsec protocol in FreeBSD ? FreeBSD itself does not do ISAKMP, that is done by the "racoon" port; you should pose your question to snap-users@kame.net. But I can tell you what the probable response is: "because XAUTH is not a standard". Same thing for mode-config. WHY it's not a standard-- that I have yet to hear explained. -Archie __________________________________________________________________________ Archie Cobbs * Packet Design * http://www.packetdesign.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message