[strongSwan] IKEv2 Over IPv6

[Arnab Bakshi]

Hi Andreas,

   Do we need to set any entry in iptables to ACCEPT the IKEv2 UDP ports
(500 & 4500) when using strongswan.

   Actually I am trying to bring up the session with strongswan against one
of my implementation.

*   Strongswan info:*

    Release version: 4.5.2
    Kernel: 2.6.35
    Linux Flavour: Ubuntu- 0.10

Please let me know on this?...Actually this used to work on Strongswan
release 4.2.12 with kernel 2.6.9-22.EL and if we disable firewall.

Regards
Arnab

On Thu, Jul 14, 2011 at 5:34 PM, Arnab Bakshi <arnab.bakshi at gmail.com>wrote:

> Thanks Andreas...
>
> I will use accordingly..
>
> Regards
> Arnab
>
>
> On Thu, Jul 14, 2011 at 11:51 AM, Andreas Steffen <
> andreas.steffen at strongswan.org> wrote:
>
>> Hello Arnab,
>>
>> it's great that you found out yourself that strongSwan has full IPv6
>> support. In very early Linux 2.6 kernels there was an issue with
>> IPv4-over-IPv6 tunnels but 2.6.35 is certainly fine.
>>
>> Best regards
>>
>> Andreas
>>
>>
>> On 07/14/2011 06:43 AM, Arnab Bakshi wrote:
>>
>>> Ok I think I got some info from here:
>>> http://www.strongswan.org/uml/**testresults43/ipv6/<http://www.strongswan.org/uml/testresults43/ipv6/>
>>>
>>> Maybe if you can throw light on the required kernel version or any other
>>> points to be noted for me.
>>>
>>> Regards
>>> Arnab
>>> On Thu, Jul 14, 2011 at 10:04 AM, Arnab Bakshi <arnab.bakshi at gmail.com
>>> <mailto:arnab.bakshi at gmail.com**>> wrote:
>>>
>>>    Hi,
>>>
>>>         Need one information regarding whether strongswan supports
>>>    IKEv2 sessions over IPv6. My requirement is to carry IPv4 traffic
>>>    over the IPv6 network and the SAs should be brought up using IKEv2
>>>    over the IPv6 core.
>>>
>>>         Also is there any dependency on the kernel version for the
>>>    support. Right now I have the kernel version 2.6.35
>>>
>>>    Regards
>>>    Arnab
>>>
>>
>> ==============================**==============================**
>> ==========
>> Andreas Steffen                         andreas.steffen at strongswan.org
>> strongSwan - the Linux VPN Solution!                www.strongswan.org
>> Institute for Internet Technologies and Applications
>> University of Applied Sciences Rapperswil
>> CH-8640 Rapperswil (Switzerland)
>> ==============================**=============================[**
>> ITA-HSR]==
>>
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20110720/a596fe84/attachment.html>