[Openswan dev] [Ticket#: 2004081310000202] Re: [Ticket#: 2004081310000202]

[DrayTek Support]

Dear Paul Wouters,

Thanks for your feedback.
We are so glad to hear this good news from you.
Our RD staffs will implement this issue into the released firmware for all Vigor's routers in future.
As the re-key problem, we will test and fix it before released. 


Best regards,
Sam Hu
FAE Department / Draytek Corp.
DrayTek: for Vigorous Broadband Access


Paul Wouters <paul at xtdnet.nl> wrote:

> On Mon, 23 Aug 2004, DrayTek Support wrote:
> 
> > Dear Paul Wouters,
> >
> > Here is the beta firmware to add multi-tunnels function for Vigor2600G on the 
> attachment.
> > Please upgrade it and kindly share the result with us.
> > Note, this beta firmware has been authenticated this function only.
> 
> Your beta-firmware image is working flawlessly!
> We now have two tunnels up from the Vigor to an Openswan server and traffic is 
> flowing
> over both tunnels!
> 
> Will you be also updating the vigor 2500's with this bugfix? Since most of our
> 
> Vigor models are actually the 2500 (annex A and B) and the 2500Ge models.
> 
> The other problem I reported about the failing rekeying was also found. it seems 
> that
> the webinterface doesn't always update all the changes you make when there is 
> a popup
> involved. So we ended up having some weird tunnel that started from the Openswan 
> end
> using ESP and at rekey time the Vigor wanted to negotiate AH only. Openswan incorrectly
> 
> marked the ESP tunnel as "up" while it was endlessly failing to rekey over the 
> ISAKMP
> channel.
> 
> Thanks to Draytek for the great support on this issue!
> 
> Paul
>