[strongSwan] IPCOMP question

[Anton]

Hi Martin.

I can not wait for next release and I have compiled strongswan with patch you had offered.
Now IPCOMP works through NAT.

Many thanks.


В Fri, 17 May 2013 08:49:53 +0700
Anton <warm at mtele.pro> пишет:

> Hi Martin.
> 
> Thanks. I'll try with next release of strongswan.
> 
> 
> On Thu, 16 May 2013 13:43:39 +0200
> Martin Willi <martin at strongswan.org> wrote:
> 
> > Hi Anton,
> > 
> > > So why IPCOMP does not work through NAT or UDP encapsulation ? I
> > > suspect there is some fundamental reason (protocols restrictions or
> > > so).
> > 
> > There is no protocol restriction or something that could prevent IPComp
> > for working over NAT. However, there were some restrictions with the way
> > charon installed the compression SA bundle.
> > 
> > It seems that these restrictions don't apply anymore with the way we
> > handle those SA bundles now. In my testing it seems that compression
> > works fine both over connections with forceencaps and over NAT. You may
> > try the patch at [1] that allows you to use compression on such
> > connections, let me know if that works for you.
> > 
> > Regards
> > Martin
> > 
> > [1]http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=refs/heads/ipcomp-nat
> > 
> > 
> 
>