<HTML><HEAD>
<META http-equiv=Content-Type content='text/html; charset=euc-kr'>
<title>Samsung Enterprise Portal mySingle</title>
<style> P, td, li {font-family:굴림체, arial; font-size:9pt; margin-top:5px;margin-bottom:5px;} body{font-family:굴림체, arial; font-size:9pt;}</style></HEAD><BODY><br> 안녕하세요, 차현욱입니다. <br>
<br> <p><b>Since&nbsp;NETKEY&nbsp;does&nbsp;not&nbsp;have&nbsp;ipsecX&nbsp;interfaces,&nbsp;it&nbsp;does&nbsp;not&nbsp;require&nbsp;a&nbsp;leftnexthop.<br> </b>
<br>GWIMv6 는 netkey stack 을 사용하는 것으로 알고 있습니다. local router 항목이 
필요없다면 항목을 없애는 것을 검토해 주십시요.
<p>감사합니다. </p>
<p>&nbsp;</p>
<p> Joseph&nbsp;HyunWook&nbsp;Cha<br>
<br>
The&nbsp;truth&nbsp;will&nbsp;set&nbsp;you&nbsp;free&nbsp;!!!<br>
<br>
Software&nbsp;Engineer&nbsp;<br>
Development&nbsp;Part&nbsp;1.&nbsp;I/Infra&nbsp;&nbsp;<br>
Network&nbsp;System&nbsp;Division&nbsp;<br>
Tel&nbsp;031-279-3804&nbsp;&nbsp;Mobile&nbsp;010-3024-3804<br>
<br>
-------&nbsp;Original&nbsp;Message&nbsp;-------<br>
Sender&nbsp;:&nbsp;Paul&nbsp;Wouters&lt;paul@xelerance.com&gt;&nbsp;<br>
Date&nbsp;&nbsp;&nbsp;:&nbsp;2007-12-01&nbsp;04:50&nbsp;(GMT+09:00)<br>
Title&nbsp;&nbsp;:&nbsp;Re:&nbsp;[Openswan&nbsp;Users]&nbsp;Question&nbsp;about&nbsp;leftnexthop<br>
&nbsp;configuration.(Retransmission)<br>
<br>
On&nbsp;Fri,&nbsp;30&nbsp;Nov&nbsp;2007,&nbsp;???&nbsp;wrote:<br>
<br>
&gt;<br>
&gt;&nbsp;We&nbsp;are&nbsp;using&nbsp;Openswan&nbsp;for&nbsp;our&nbsp;router&nbsp;products.&nbsp;While&nbsp;satisfied&nbsp;with&nbsp;almost&nbsp;everything,&nbsp;I&nbsp;want&nbsp;to&nbsp;ask&nbsp;a&nbsp;basic&nbsp;question&nbsp;via&nbsp;this&nbsp;mailing&nbsp;list.<br>
&gt;&nbsp;Why&nbsp;should&nbsp;users&nbsp;configure&nbsp;leftnexthop&nbsp;parameters&nbsp;explicitly?<br>
&gt;&nbsp;As&nbsp;long&nbsp;as&nbsp;I&nbsp;know,&nbsp;this&nbsp;field&nbsp;is&nbsp;not&nbsp;relevent&nbsp;to&nbsp;the&nbsp;IPSec&nbsp;protocol&nbsp;and&nbsp;packet&nbsp;forwarding&nbsp;is&nbsp;determined&nbsp;by&nbsp;routing&nbsp;table.<br>
<br>
It&nbsp;is&nbsp;only&nbsp;used&nbsp;by&nbsp;KLIPS,&nbsp;which&nbsp;provides&nbsp;virtual&nbsp;interfaces&nbsp;(ipsecX)<br>
bound&nbsp;to&nbsp;real&nbsp;interfaces&nbsp;(ethX,&nbsp;pppX).&nbsp;It&nbsp;needs&nbsp;to&nbsp;know&nbsp;which&nbsp;interface&nbsp;to<br>
send&nbsp;the&nbsp;packet&nbsp;out&nbsp;after&nbsp;it&nbsp;received&nbsp;it&nbsp;on&nbsp;an&nbsp;ipsecX&nbsp;interface.&nbsp;&nbsp;Mostly,<br>
this&nbsp;can&nbsp;be&nbsp;determined&nbsp;by&nbsp;looking&nbsp;at&nbsp;which&nbsp;interface&nbsp;the&nbsp;default&nbsp;route<br>
points&nbsp;to,&nbsp;but&nbsp;somethings&nbsp;people&nbsp;have&nbsp;odd&nbsp;settings,&nbsp;or&nbsp;their&nbsp;default<br>
route&nbsp;goes&nbsp;another&nbsp;way&nbsp;then&nbsp;the&nbsp;intended&nbsp;encrypted&nbsp;packet&nbsp;should&nbsp;go.<br>
<br>
Since&nbsp;NETKEY&nbsp;does&nbsp;not&nbsp;have&nbsp;ipsecX&nbsp;interfaces,&nbsp;it&nbsp;does&nbsp;not&nbsp;require&nbsp;a&nbsp;leftnexthop.<br>
<br>
Paul,&nbsp;still&nbsp;hoping&nbsp;for&nbsp;more&nbsp;resoures&nbsp;to&nbsp;work&nbsp;on&nbsp;merging&nbsp;KLIPS&nbsp;and&nbsp;NETKEY&nbsp;to<br>
be&nbsp;the&nbsp;best&nbsp;of&nbsp;both&nbsp;worlds.<br>
<br>
<br>
 </p>
</BODY></HTML>