[Openswan Users] No ipsec0 inteface

[Joost Wolthuis]

Paul,

Thanks for the quick response.
As you mentioned the firewalling is exactly why I need it.
Any idea when this port will happen?


Kind regards,

Joost Wolthuis
Telecats support engineer
Phone +31 53 4889920 (dutch)
Phone +31 53 4889921 (english)
Fax +31 53 4889910
Email Joost at Telecats.nl
Email Support at Telecats.nl



-----Original Message-----
From: Paul Wouters [mailto:paul at xelerance.com] 
Sent: donderdag 27 mei 2004 17:37
To: Joost Wolthuis
Cc: users at lists.openswan.org
Subject: Re: [Openswan Users] No ipsec0 inteface 

On Thu, 27 May 2004, Joost Wolthuis wrote:

> I'm using fedora core1, kernel 2.6.6 and openswan-2.1.2
> 
> At the other end i can see that all traffic is encrypted so the tunnel
> is perfect.
> 
> The only strange thing is that there is no interface ipsec0 but an
extra
> route through interface eth2. 

2.6 native stack does not have virtual ipsecX interface support. KLIPS,
the
2.4 code that supports virtual interfaces has not yet been ported for
use
on 2.6. If you need interfaces to facilitate firewalling, at this moment
your best bet is to fall back to a 2.4 kernel with KLIPS.

Paul