Date: Mon, 21 Feb 2005 04:24:42 -0800 From: "Loren M. Lang" <lorenl@alzatex.com> To: Christopher Rued <c.rued@xsb.com> Cc: questions@freebsd.org Subject: Re: Racoon without compression Message-ID: <20050221122442.GH4471@alzatex.com> In-Reply-To: <42127FB5.6040807@xsb.com> References: <42127FB5.6040807@xsb.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Feb 15, 2005 at 06:03:17PM -0500, Christopher Rued wrote: > Hi all, > > I'm trying to set up a VPN connection to a NetScreen VPN using racoon. > I configured all of the settings (I think) to match those specified on > the NetScreen, except for compression_algorithm. > > The only option for compression_algorithm given to me by racoon is > deflate. The NetScreen VPN is configured with "Compression: None". > > Am I out of luck here? No, compression is not needed for IPSec. The only compression algorithm racoon supports is defate, but that doesn't mean it won't run without compression. The settings in /etc/ipsec.conf are what tell FreeBSD's IPSec to use or not use compression. ESP is an encryption layer that you can enable in ipsec.conf and IPComp is a compression layer, if you only setup ESP then no compression takes place. > > Please be sure to inclue me on any replies, as I am not subscibed to the > list. > > TIA > > --Chris > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" -- I sense much NT in you. NT leads to Bluescreen. Bluescreen leads to downtime. Downtime leads to suffering. NT is the path to the darkside. Powerful Unix is. Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc Fingerprint: B3B9 D669 69C9 09EC 1BCD 835A FAF3 7A46 E4A3 280C
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050221122442.GH4471>