[Openswan Users] Openswan with NETKEY and monitoring data

[Mark Dalton]

On 04/08/2011 05:39 PM, Paul Wouters wrote:
> On Fri, 8 Apr 2011, Mark Dalton wrote:
>
>> Thanks!   That was my impression.   So I need to work on getting
>> klips working.   Back in the FreeSwan days that is how we did it
>> since we had ipsec0.
>
> You be easy these days:
>
> apt-get|yum install kernel-dev(el)
> export KERNELSRC=/lib/modules/`uname -r`/build
> cd openswan-2.6.x
> make module module_install
> edit ipsec.conf and put in: protostack=klips
>
> Paul

Thank you!   I was able to get back to that lab and get them
setup.

I could not get the esp/xfrm kernel module removed.   I had to
reboot to get it cleared.

It is up and running and we are getting all the data they needed.

Thanks!
Mark