On Mon, Nov 14, 2011 at 09:08:05PM +0400, Lucas wrote: > I am talking about ipsec over TCP. > > Everything can do ipsec over UDP, but none over TCP. But on my job for the security reason UDP is > blocked, cisco vpn can do ipsec over tcp. It seems you have your layering wrong. IPSec operates on IP protocol, below UDP and TCP. Only IKE, the key exchange, protocol works on UDP. Maybe you thought about different technology? For VPN, OpenVPN provided in Fedora support TCP transport. -- Tomasz Torcz RIP is irrevelant. Spoofing is futile. xmpp: zdzichubg@xxxxxxxxx Your routes will be aggreggated. -- Alex Yuriev -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel