[strongSwan] IPCOMP question
warm at mtele.pro
Fri May 17 16:18:01 CEST 2013
I can not wait for next release and I have compiled strongswan with patch you had offered.
Now IPCOMP works through NAT.
В Fri, 17 May 2013 08:49:53 +0700
Anton <warm at mtele.pro> пишет:
> Hi Martin.
> Thanks. I'll try with next release of strongswan.
> On Thu, 16 May 2013 13:43:39 +0200
> Martin Willi <martin at strongswan.org> wrote:
> > Hi Anton,
> > > So why IPCOMP does not work through NAT or UDP encapsulation ? I
> > > suspect there is some fundamental reason (protocols restrictions or
> > > so).
> > There is no protocol restriction or something that could prevent IPComp
> > for working over NAT. However, there were some restrictions with the way
> > charon installed the compression SA bundle.
> > It seems that these restrictions don't apply anymore with the way we
> > handle those SA bundles now. In my testing it seems that compression
> > works fine both over connections with forceencaps and over NAT. You may
> > try the patch at  that allows you to use compression on such
> > connections, let me know if that works for you.
> > Regards
> > Martin
> > http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=refs/heads/ipcomp-nat
More information about the Users