[strongSwan] IPCOMP question

[Anton]

Hi Martin.

Thanks. I'll try with next release of strongswan.


On Thu, 16 May 2013 13:43:39 +0200
Martin Willi <martin at strongswan.org> wrote:

> Hi Anton,
> 
> > So why IPCOMP does not work through NAT or UDP encapsulation ? I
> > suspect there is some fundamental reason (protocols restrictions or
> > so).
> 
> There is no protocol restriction or something that could prevent IPComp
> for working over NAT. However, there were some restrictions with the way
> charon installed the compression SA bundle.
> 
> It seems that these restrictions don't apply anymore with the way we
> handle those SA bundles now. In my testing it seems that compression
> works fine both over connections with forceencaps and over NAT. You may
> try the patch at [1] that allows you to use compression on such
> connections, let me know if that works for you.
> 
> Regards
> Martin
> 
> [1]http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=refs/heads/ipcomp-nat
> 
> 


-- 
Anton [WARM-RIPE]
MT NOC division head
tel. 8 (3822) 555-797