Re: IKE, Xauth and NAT-T

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, 15 Aug 2003 18:09:49 -0700
"H. Peter Anvin" <hpa@zytor.com> wrote:

> Hmmm... maybe I should hack in XAuth (or if you think it'd be a quick
> one...) vpnc contains an apparently working XAuth implementation that I
> can maybe crib off.
> 
> http://people.redhat.com/~katzj/vpnc-0.1-3.src.rpm

Go for it.

You could also hack vpnc to configure the kernel instead of
it's internal IPSEC implementation.  I intended to do this
at one point but never got the time.

On the client side the only thing XAUTH needs is the packet
formats and asking the user for the passphrase, it's pretty
trivial.  You don't even need a RADIUS implementation or
anything like that.

The hard part is the IKE side code to support the other end.
-
: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netdev]     [Ethernet Bridging]     [Linux 802.1Q VLAN]     [Linux Wireless]     [Kernel Newbies]     [Security]     [Linux for Hams]     [Netfilter]     [Git]     [Bugtraq]     [Yosemite News and Information]     [MIPS Linux]     [ARM Linux]     [Linux RAID]     [Linux PCI]     [Linux Admin]     [Samba]

  Powered by Linux