[ds6] ipsec on ipv6

[Gessler Gerhard]

Dear Josè,

this Pluto provided from USAGI is a modified version of an older FreeSWAN Pluto (could be 1.8 or something), changed to work on their PF-KEY interface implementation. I don't know what it can do and what not.

Are there any special reasons why you want to use the USAGI-kernels?
The native IPsec implementation in 2.6.x kernels (and 2.4.x backports) has also IPv6 support and works either with the hacked racoon provided by the ipsec-tools-software, but also with OpenSWAN, which is the successor of FreeSWAN. If you want to go this way, I'll suggest to use the latest 2.6.x (should be 2.6.9 by the time of writing) and OpenSWAN-2.3.0-dr2 (development release, but has some improvements for IPv6 support in the provided script machinery).

OpenSWAN works quite nice on 2.6.x kernels and can make use of the IPsec kernel implementation. The Pluto daemon from OpenSWAN can handle both IPv4 and IPv6.

Cheers,

	Gerhard

--------------------------------------------
Gerhard Gessler

Communication Networks, IABG mbH
Einsteinstr. 20
85521 Ottobrunn, Germany

Telefon: +49 89 6088 - 2021
Fax: +49 89 6088 - 2845

E-Mail: gessler at iabg dot de 

  > -----Original Message-----
  > From: ds6-bounces+gessler=iabg.de at deepspace6.net 
  > [mailto:ds6-bounces+gessler=iabg.de at deepspace6.net] On 
  > Behalf Of José de Figueiredo
  > Sent: Wednesday, October 13, 2004 6:13 PM
  > To: ds6 at deepspace6.net
  > Subject: [ds6] ipsec on ipv6
  > 
  > 
  > Hi all
  > 
  > I need to setup a security way bettwen two hosts using 
  > ipv6. The USAGI project provide ipsec using PLUTO software. 
  > 
  > Anybody can provide more information about this pluto ?
  > 
  > Anybody know another method of ipsec ?
  > 
  > 
  > Thanks !
  > 
  > -- 
  > Ciência da Computação
  > Universidade de Passo Fundo 
  > _______________________________________________
  > ds6 mailing list
  > ds6 at deepspace6.net
  > http://lists.deepspace6.net/listinfo/ds6
  >