[Openswan Users] Fedora 7, openswan 2.10 on 2.6.22 kernels with NAT-T and KLIPS

[Agent Smith]

I have to have KLIPS for the ipsec0 interface that I
can do iptables manipulations easily..

we run our corporate VPN servers on fedora 6, OpenSwan
2.4.7 with kernel 2.6.18-2. KLIPS and NAT-T patches
apply beautifully there. We have two more servers that
I have to implement and since fedora 8 is out I
thought I'll upgrade to at least fc7 but maybe I'll
wait till a newer OpenSwan and/or kernel version that
solves some of these issues. 

that being said, can't thank you enough for writing
and giving away openswan...


--- Paul Wouters <paul at xelerance.com> wrote:

> On Mon, 26 Nov 2007, Agent Smith wrote:
> 
> Can you use modules? Then only patch NAT-T and build
> ipsec
> as a module using 'make module module_install.
> 
> Paul
> 
> > Date: Mon, 26 Nov 2007 14:07:11 -0800 (PST)
> > From: Agent Smith <news8080 at yahoo.com>
> > To:  <users at openswan.org>
> > Subject: [Openswan Users] Fedora 7,
> >     openswan 2.10  on 2.6.22 kernels with NAT-T
> and KLIPS
> >
> > This maybe a kernel question and should go to
> redhat
> > group but I want to see if others have seen it
> too.
> >
> > I installed FC7-i386/32bit / downloaded kernel
> > linux-2.6.22,
> openswan-2.4.10.kernel-2.6.22-natt.patch
> > and openswan-2.4.10.kernel-2.6-klips.patch
> >
> > I then patched the kernel and tried copied the
> .config
> > over from the existing installed kernel that came
> with
> > Fc7.
> >
> > I've been using OS for a while now and usually at
> this
> > point I should be able to do 'make menuconfig' and
> > select KLIPS and NAT-T in that and compile the
> kernel;
> > well when I did make menuconfig, I only saw NAT-T
> > stuff there and the KLIPS thing never showed up.
> >
> > also to get it to even run 'make menuconfig' I had
> to
> > touch net/ipsec/Kconfig which I don't ever
> remember
> > doing whenever I installed KLIPS/NAT-T with
> fedora.
> >
> > (I suppose I can go vi the .config and add KLIPS
> in
> > there manually)
> >
> > anyone seen it?
> >
> >
> >      
>
____________________________________________________________________________________
> > Never miss a thing.  Make Yahoo your home page.
> > http://www.yahoo.com/r/hs
> > _______________________________________________
> > Users at openswan.org
> > http://lists.openswan.org/mailman/listinfo/users
> > Building and Integrating Virtual Private Networks
> with Openswan:
> >
>
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
> >
> 
> -- 
> Building and integrating Virtual Private Networks
> with Openswan:
>
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
> 



      ____________________________________________________________________________________
Be a better pen pal. 
Text or chat with friends inside Yahoo! Mail. See how.  http://overview.mail.yahoo.com/