[Openswan dev] Dev Digest, Vol 60, Issue 6

[kevin.hu]

2008/11/16, dev-request at openswan.org <dev-request at openswan.org>:
> Send Dev mailing list submissions to
> 	dev at openswan.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> 	http://lists.openswan.org/mailman/listinfo/dev
> or, via email, send a message with subject or body 'help' to
> 	dev-request at openswan.org
>
> You can reach the person managing the list at
> 	dev-owner at openswan.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Dev digest..."
>
>
> Today's Topics:
>
>    1. Re: IPv6 support in kernel part of openswan (Paul Wouters)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Sat, 15 Nov 2008 12:18:08 -0500 (EST)
> From: Paul Wouters <paul at xelerance.com>
> Subject: Re: [Openswan dev] IPv6 support in kernel part of openswan
> To: John Denker <jsd at av8n.com>
> Cc: dev at openswan.org
> Message-ID: <Pine.LNX.4.64.0811151216290.5466 at newtla.xelerance.com>
> Content-Type: TEXT/PLAIN; charset=US-ASCII
>
> On Sat, 15 Nov 2008, John Denker wrote:
>
>> > What kernel part (NETKEY, KLIPS, USAGI, ...) should I use to have
>> > both: IPv6 support and virtual ipsec network interfaces (ipsecX)?
>>
>> I don't think you can have both.
>>  -- ipsec0 is a KLIPS thing (not NETKEY)
>>  -- IPv6 is a NETKEY thing (not KLIPS)
>
> That's right.
>
>> Most of the things that can be done with ipsec0 can be
>> done in other ways.  This is a lot of extra work, but
>> AFAIK it is a price that must be paid for IPv6.
>
> I'd really like netkey to be able to asssign a tun/tap/sit interface
> to a tunnel. I wonder if it is possible to set one up and do guide
> the packets through with fwmark'ing.
>
> Paul
>
>
> ------------------------------
>
> _______________________________________________
> Dev mailing list
> Dev at openswan.org
> http://lists.openswan.org/mailman/listinfo/dev
>
>
> End of Dev Digest, Vol 60, Issue 6
> **********************************
>

-- 
从我的移动设备发送

Best Regards
Kevin Hu