[strongSwan] Site2Site with AH + ESP

[Andreas Steffen]

Hi Hans,

as our wiki says, we don't support AH+ESP bundles. Since ESP comes
with a data integrity checksum of its own, adding AH on top of it
doesn't make much sense anyway.

Best regards

Andreas

On 06/16/2016 09:41 AM, Hans Anthes wrote:
> Hi,
> 
> i use a Config like the Example-Config
> (https://www.strongswan.org/testing/testresults/ikev2/net2net-psk/). It
> works fine. But i will pack the ESP Pakets in AH.
> In https://wiki.strongswan.org/projects/strongswan/wiki/ConnSection in
> AH Section can i read "Only either the *ah* or the *esp* keyword may be
> used, AH+ESP bundles are not supported."
> If it possible and then how?
> 
> Thanks H.Anthes
> 
> -- 
> http://am-kalten-polar.blogspot.de/

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Open Source VPN Solution!          www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4275 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20160616/992bd40d/attachment.bin>