Pekka Savola <pekkas@xxxxxxxxxx> wrote:
>
> I'm interested whether Linux IPsec implementations support:
>
> 1) IPv6 payload inside IPv4 IPsec tunnel/transport?
It's not supported directly by the IPsec stack. However, you can
setup an SIT tunnel over a transport IPv4 IPsec SA.
> 2) NAT-traversal? (There are at least some patches in OpenSWAN, etc.
> for this). This could be very handy combined with the above.
Yes. In particular Non-ESP UDP encapsulation is supported.
I believe that OpenSWAN has the code to work with the Linux stack.
> [[ 3) Some feasible key management method, such as certificates. I
> think this exists, and doesn't require support in the kernel. ]]
OpenSWAN supports that.
--
Debian GNU/Linux 3.0 is out! ( http://www.debian.org/ )
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
|