[strongSwan] Force UDP Encapsulation in 5.0.4?
andreas.steffen at strongswan.org
Mon Jul 8 06:34:17 CEST 2013
where did you read that? I don't see any "prior" in the current
ipsec.conf man page.
On 07/08/2013 06:27 AM, Dan Cook wrote:
> Funny. I just found that out as your email arrived.
> I didn't try it initially because the docs say "prior" to 5.0.0.
> e.g. "Only supported for IKEv2 prior to 5.0.0."
> I hope that is just a typo and it is fully supported in 5.0 going forward.
> Amazon does not route ESP packets so this is the only way to do
> transport mode in the same data center.
> Thanks for the help,
> On Sun, Jul 7, 2013 at 8:58 PM, Andreas Steffen
> <andreas.steffen at strongswan.org> wrote:
>> Hi Dan,
>> in the connection definition of ipsec.conf add the parameter
>> On 07/07/2013 05:04 AM, Dan Cook wrote:
>>> I am working in a virtual environment that does not allow ESP traffic.
>>> Is there a way to force strongswan 5.0.4 to use UDP encapsulation of
>>> the ESP traffic? The machines are connected over a non-natted internal
>>> If this is not possible, can you please advise where in the code I
>>> should look to "force" this connection to UDP encapsulation.
>>> Dan Cook
>> Andreas Steffen andreas.steffen at strongswan.org
>> strongSwan - the Linux VPN Solution! www.strongswan.org
>> Institute for Internet Technologies and Applications
>> University of Applied Sciences Rapperswil
>> CH-8640 Rapperswil (Switzerland)
Andreas Steffen andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution! www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 4468 bytes
Desc: S/MIME Cryptographic Signature
More information about the Users