[strongSwan] Recommendation for IKEv2 Capable Client on Win XP

[Holger Rauch]

Hi Andreas,

thanks a lot for your detailed response.
________________________________________
From: Andreas Steffen [andreas.steffen at strongswan.org]
Sent: Sunday, November 07, 2010 19:14
To: Holger Rauch
Cc: users at lists.strongswan.org
Subject: Re: [strongSwan] Recommendation for IKEv2 Capable Client on Win XP

> [...]

>Unfortunately we don't support any fallback from IKEv2 to IKEv1
>because the charon and pluto daemons are very loosely coupled.
>This might change in the future when IKEv2 might get integrated
>into the IKEv2 daemon (although we rather hope that IKEv1 will
>go away and rest in peace ;-) )

Ok, so that means I need pluto in addition to charon in order to be able to more easily support Win XP clients (SafeNet wants $149 for their HAremote product, which is not really cheap considering that we'll probably replace Win XP by Win7 in the foreseeable future). I would like to use strongSwan on FreeBSD 8.1 stable and noticed that "--disable-pluto" is passed to configure (by the security/strongswan port which builds strongSwan 4.4.0). The port maintainer obviously decided to follow the recommendations given here:

http://wiki.strongswan.org/wiki/1/FreeBSD


Could you please tell me why pluto is supposed to be disabled on FreeBSD?

Thanks in advance & kind regards,

    Holger

> [...]

THE standard software for Aviation Authorities

**********************************************************************************************
IMPORTANT NOTICE / WICHTIGER HINWEIS
This communication contains information which is confidential and may also be privileged. It is for the 
exclusive use of the intended recipient(s). If you are not the intended recipient(s) please note that any 
distribution, copying or use of this communication or the information in it is strictly prohibited. If you have 
received this communication in error please notify us immediately by email or by telephone and then delete 
this email and any copies of it.
Diese E-Mail koennte vertrauliche und/oder rechtlich geschuetzte Informationen enthalten. Wenn Sie nicht 
der richtige Adressat sind oder diese E-Mail irrtuemlich erhalten haben, informieren Sie bitte sofort den 
Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser 
Mail sind nicht gestattet.
**********************************************************************************************