[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Tue, 11 Dec 2007 23:03:10 -0600
From: Joy Latten <latten@...tin.ibm.com>
To: sreeniva@....psu.edu
Cc: netdev@...r.kernel.org
Subject: Re: Labeled IPsec with NAT
>I am working on setting up Labeled IPsec along with iptables nat
>rules. Once I insert nat related rules, the ipsec connection breaks
>and the system tries to re-negotiate and creates multiple SAs. I am
>using 2.6.19 kernel (with Venkat's MLSXFRM patches & bugfixes). I
>guess those were incorporated into the 2.6.20 kernel.
Are you using racoon in ipsec-tools to create labeled SAs?
If so, I recall seeing duplicate SA pairs being created
while using racoon for labeled ipsec. We determined userspace
should manage this.
I posted a patch to ipsec-tools, but I don't think they
ever picked it up... I do not know if this is same problem,
but you could give it a try.
regards,
Joy
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists