<br>Hi Paul,<br> I need a clarification on " What configuration I need to do in order
to specify certain traffic has to go through tunnel and remaining
traffic has to go unencrypted(through normal interface)?. Please find
my setup below.<br><div class="gmail_quote"><br><br><br><div class="gmail_quote"><br><br><br><u></u>
<div>
<div><font size="2" face="Arial"><img src="cid:312180813@26092011-1A3E"></font></div>
<div> <br>I need to encrypt only ICMP data traffic and I don't want to encrypt TCP traffic. Is there any configuration to specify the traffic type(protocol) in openswan?<br><br>I have gone through the openswan code. what is the purpose of this structure?<br>
<br>struct xfrm_selector<br>{<br> xfrm_address_t daddr;<br> xfrm_address_t saddr;<br> uint16_t dport;<br> uint16_t dport_mask;<br> uint16_t sport;<br> uint16_t sport_mask;<br> uint16_t family;<br>
uint8_t prefixlen_d;<br> uint8_t prefixlen_s;<br> uint8_t proto;<br> int ifindex;<br> uid_t user;<br>};<br><br>Whether filling this structure serves the purpose I have asked above. If it serves my purpose, I have one more question.<br>
Suppose I have given daddr, saddr and proto as selectors, whether all these three parameters are checked for an incoming traffic to match IPSec policy ?<br><br>Regards,<br>Saravanan N<br><br></div><br>
<font color="Gray" size="2" face="Arial"><br>
</font>
</div>
</div><br>
</div><br>