Date: Thu, 16 Jul 2009 14:57:59 +0200 From: Gergely CZUCZY <phoemix@harmless.hu> To: VANHULLEBUS Yvan <vanhu@FreeBSD.org> Cc: freebsd-net@freebsd.org Subject: Re: FreeBSD 7.2 racoon and NAT-T Message-ID: <20090716145759.000074c9@unknown> In-Reply-To: <20090716123836.GA85624@zeninc.net> References: <20090716143248.0000184e@unknown> <20090716123836.GA85624@zeninc.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 16 Jul 2009 14:38:36 +0200 VANHULLEBUS Yvan <vanhu@FreeBSD.org> wrote: > On Thu, Jul 16, 2009 at 02:32:48PM +0200, Gergely CZUCZY wrote: > > Hello, > > Hi. > > > > I'd like to ask for the state of that NAT-T support in 7.2. I've > > seen a note in ipsec-tools's OPTIONS for a required kernel patch > > for 6.x in order to have NAT-T working. Is this also required for > > 7.2? If a kernel patch is needed, is a recent patch available for > > 7.2? Does racoon needs to be patched with anything not in the port? > > http://people.freebsd.org/~vanhu/NAT-T/patch-natt-7.2-2009-05-12.diff > and ipsec-tools 0.7.x will work together (NOT tried with very recent > versions of stable/7, please report any problem). > > > A new FreeBSD patch will be needed to be able to run with upcoming > 0.8.x (and with recent HEAD snapshots), and will be put in the same > location. Thank you very much. Would it be possible that this could be integrated? Might be with racoon, that would also be very nice. So far this is the only thing I've found in FreeBSD that needs a feature in the base install needs a 3rdparty utility in order to work at all. Would be very nice to have everything in base available to have IPSec working all around. > > > Yvan. -- Sincerely, Gergely CZUCZY Harmless Digital Bt +36-30-9702963
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20090716145759.000074c9>