[strongSwan] Compression - how to check it?

Kamil Jońca kjonca at o2.pl
Thu May 5 15:02:13 CEST 2011


Andreas Steffen
<andreas.steffen at strongswan.org> writes:

--8<---------------cut here---------------start------------->8---
>
> src 192.168.0.1 dst 192.168.0.100
> 	proto comp spi 0x0000bdf9(48633) reqid 1(0x00000001) mode tunnel
> 	replay-window 0 seq 0x00000000 flag af-unspec (0x00100000)
> 	comp deflate 0x (0 bits)
> 	lifetime config:
--8<---------------cut here---------------end--------------->8---
[...]
So, the key line is  "comp deflate 0x (0 bits)", right?
How can I check why compression is turned off?
config:
--8<---------------cut here---------------start------------->8---
version 2.0     # conforms to second version of ipsec.conf specification
ca alfa
        cacert=ca-kaczka.kjonca.pem
config setup
        charonstart=yes
        plutostart=no
        interfaces="%defaultroute"
        plutodebug="all"
        charondebug="all"
        nat_traversal=yes
conn %default
        left=%defaultroute
        leftsubnet=192.168.200.0/24
        leftcert=/etc/ipsec.d/certs/circinus.aster.net.pl.1.pem
        leftca=" C=PL, ST=Mazowieckie, L=Warszawa, O=kjonca.kjonca, OU=ipsec, CN=openswan--kjonca.kjonca"
        keyexchange=ikev2
        leftsourceip=192.168.200.200
        auto=add
        compress=yes
conn bambus.kjonca
        right=%any
        rightsourceip=192.168.200.211
        rekey=no
include /var/lib/strongswan/ipsec.conf.inc
--8<---------------cut here---------------end--------------->8---

Client is windows7 laptop configured as described at
http://wiki.strongswan.org/projects/strongswan/wiki/Win7Config 

KJ



-- 
http://modnebzdury.wordpress.com/2009/10/01/niewiarygodny-list-prof-majewskiej-wprowadzenie/
Biologia poucza, ze jeśli cię coś ugryzło, to niemal pewne, ze była to samica.





More information about the Users mailing list