[Openswan Users] Migrating to Netkey

[Michael H. Warfield]

On Mon, 2010-02-22 at 20:45 +0530, hiren joshi wrote: 
> Hello,

> I am migrating from KLIPS to Netkey (primarily to get IPv6 support).
> I humbly request all Netkey users to share major problems (if any)
> they have observed.

I think the primary one I recall is if you have any 0.0.0.0/0 routes
routing out through the tunnel with a subnet behind the gateway.  You'll
find that the subnet can communicate with the outside world through the
gateway but can not communicate with the gateway unless you add
passthrough conns for your local subnets.  If you've got more than one
local subnet, you need one for each subnet and one for each pair of
subnets.  You will also need 2.6.23 or later.
> Thank you for your time.
> Regards,
> Hiren

Mike
-- 
Michael H. Warfield (AI4NB) | (770) 985-6132 |  mhw at WittsEnd.com
   /\/\|=mhw=|\/\/          | (678) 463-0932 |  http://www.wittsend.com/mhw/
   NIC whois: MHW9          | An optimist believes we live in the best of all
 PGP Key: 0x674627FF        | possible worlds.  A pessimist is sure of it!
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 482 bytes
Desc: This is a digitally signed message part
Url : http://lists.openswan.org/pipermail/users/attachments/20100222/b298f2f1/attachment.bin