[Openswan dev] IPv6 support in kernel part of openswan

[hiren joshi]

Many thanks for the reply!

Is IPv6 support in KLIPS roadmap?

Thanks.
-hiren

On Sat, Nov 15, 2008 at 10:48 PM, Paul Wouters <paul at xelerance.com> wrote:
> On Sat, 15 Nov 2008, John Denker wrote:
>
>> > What kernel part (NETKEY, KLIPS, USAGI, ...) should I use to have
>> > both: IPv6 support and virtual ipsec network interfaces (ipsecX)?
>>
>> I don't think you can have both.
>>  -- ipsec0 is a KLIPS thing (not NETKEY)
>>  -- IPv6 is a NETKEY thing (not KLIPS)
>
> That's right.
>
>> Most of the things that can be done with ipsec0 can be
>> done in other ways.  This is a lot of extra work, but
>> AFAIK it is a price that must be paid for IPv6.
>
> I'd really like netkey to be able to asssign a tun/tap/sit interface
> to a tunnel. I wonder if it is possible to set one up and do guide
> the packets through with fwmark'ing.
>
> Paul
>