[strongSwan] Compression - how to check it?
Kamil Jońca
kjonca at o2.pl
Thu May 5 15:02:13 CEST 2011
Andreas Steffen
<andreas.steffen at strongswan.org> writes:
--8<---------------cut here---------------start------------->8---
>
> src 192.168.0.1 dst 192.168.0.100
> proto comp spi 0x0000bdf9(48633) reqid 1(0x00000001) mode tunnel
> replay-window 0 seq 0x00000000 flag af-unspec (0x00100000)
> comp deflate 0x (0 bits)
> lifetime config:
--8<---------------cut here---------------end--------------->8---
[...]
So, the key line is "comp deflate 0x (0 bits)", right?
How can I check why compression is turned off?
config:
--8<---------------cut here---------------start------------->8---
version 2.0 # conforms to second version of ipsec.conf specification
ca alfa
cacert=ca-kaczka.kjonca.pem
config setup
charonstart=yes
plutostart=no
interfaces="%defaultroute"
plutodebug="all"
charondebug="all"
nat_traversal=yes
conn %default
left=%defaultroute
leftsubnet=192.168.200.0/24
leftcert=/etc/ipsec.d/certs/circinus.aster.net.pl.1.pem
leftca=" C=PL, ST=Mazowieckie, L=Warszawa, O=kjonca.kjonca, OU=ipsec, CN=openswan--kjonca.kjonca"
keyexchange=ikev2
leftsourceip=192.168.200.200
auto=add
compress=yes
conn bambus.kjonca
right=%any
rightsourceip=192.168.200.211
rekey=no
include /var/lib/strongswan/ipsec.conf.inc
--8<---------------cut here---------------end--------------->8---
Client is windows7 laptop configured as described at
http://wiki.strongswan.org/projects/strongswan/wiki/Win7Config
KJ
--
http://modnebzdury.wordpress.com/2009/10/01/niewiarygodny-list-prof-majewskiej-wprowadzenie/
Biologia poucza, ze jeśli cię coś ugryzło, to niemal pewne, ze była to samica.
More information about the Users
mailing list