<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.19019">
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2 face="MS Sans Serif">
<DIV>Hi Andreas,</DIV>
<DIV> </DIV>
<DIV>Is AES-GMAC a recent addition to StrongSwan? Is it supported in
version 4.4.1?</DIV>
<DIV>I searched for GMAC support earlier and found a post from you (back in
2009 I think) stating aes-gmac is not supported because the kernel
does not support it and AH does not survive NAT-T.</DIV>
<DIV> </DIV>
<DIV>Regards,</DIV>
<DIV>Simon</DIV>
<DIV> </DIV>
<DIV>----- Original Message -----
<DIV>From: "Andreas Steffen" <<A
href="mailto:andreas.steffen@strongswan.org">andreas.steffen@strongswan.org</A>></DIV>
<DIV>To: "SaRaVanAn" <<A
href="mailto:saravanan.nagarajan87@gmail.com">saravanan.nagarajan87@gmail.com</A>></DIV>
<DIV>Cc: <<A
href="mailto:users@lists.strongswan.org">users@lists.strongswan.org</A>></DIV>
<DIV>Sent: Monday, May 28, 2012 7:54 AM</DIV>
<DIV>Subject: Re: [strongSwan] [Strongswan] AH mode support in Strongswan for
Ikev1</DIV></DIV>
<DIV><BR></DIV>Hello,<BR><BR>AH withouth ESP is not supported by strongSwan
IKEv1 (which goes all<BR>the way back to FreeS/WAN).<BR><BR>With auth=esp which
is the default you opt for ESP encryption and ESP's<BR>optional authentication
mode.<BR><BR>With auth=ah you get ESP encryption withouth ESP's
optional<BR>authentication mode but you get AH on top of ESP instead.<BR><BR>If
you don't want to encrypt your packets please use either<BR>ESP NULL
encryption<BR><BR> <A
href="http://www.strongswan.org/uml/testresults/ikev1/esp-alg-null">http://www.strongswan.org/uml/testresults/ikev1/esp-alg-null</A><BR><BR>or
AES-GMAC<BR><BR> <A
href="http://www.strongswan.org/uml/testresults/ikev1/esp-alg-aes-gmac">http://www.strongswan.org/uml/testresults/ikev1/esp-alg-aes-gmac</A><BR><BR>Regards<BR><BR>Andreas<BR><BR></FONT></DIV></BODY></HTML>