[IPsec] IPSec with IPComp Tunnel Mode

srwg <nay_goi@yahoo.com> Mon, 01 October 2007 18:56 UTC

Return-path: <ipsec-bounces@ietf.org>
Received: from [127.0.0.1] (helo=stiedprmman1.va.neustar.com) by megatron.ietf.org with esmtp (Exim 4.43) id 1IcQRJ-00043e-8l; Mon, 01 Oct 2007 14:56:21 -0400
Received: from ipsec by megatron.ietf.org with local (Exim 4.43) id 1IcLIX-00008b-EJ for ipsec-confirm+ok@megatron.ietf.org; Mon, 01 Oct 2007 09:26:57 -0400
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1IcLIX-00008T-4L for ipsec@ietf.org; Mon, 01 Oct 2007 09:26:57 -0400
Received: from kuber.nabble.com ([216.139.236.158]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1IcLIQ-0001qC-Vo for ipsec@ietf.org; Mon, 01 Oct 2007 09:26:57 -0400
Received: from isper.nabble.com ([192.168.236.156]) by kuber.nabble.com with esmtp (Exim 4.63) (envelope-from <bounces@nabble.com>) id 1IcLIG-0002ch-Fg for ipsec@ietf.org; Mon, 01 Oct 2007 06:26:40 -0700
Message-ID: <12979181.post@talk.nabble.com>
Date: Mon, 01 Oct 2007 06:26:40 -0700
From: srwg <nay_goi@yahoo.com>
To: ipsec@ietf.org
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Nabble-From: nay_goi@yahoo.com
X-Spam-Score: 1.4 (+)
X-Scan-Signature: 21c69d3cfc2dd19218717dbe1d974352
X-Mailman-Approved-At: Mon, 01 Oct 2007 14:56:20 -0400
Subject: [IPsec] IPSec with IPComp Tunnel Mode
X-BeenThere: ipsec@ietf.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussion of IPsec protocols <ipsec.ietf.org>
List-Unsubscribe: <https://www1.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=unsubscribe>
List-Post: <mailto:ipsec@ietf.org>
List-Help: <mailto:ipsec-request@ietf.org?subject=help>
List-Subscribe: <https://www1.ietf.org/mailman/listinfo/ipsec>, <mailto:ipsec-request@ietf.org?subject=subscribe>
Errors-To: ipsec-bounces@ietf.org

Dear all,
I'm just really using linux for a while. Now I'm trying these and those in
many aspects with linux especially CentOS5 . My problem is 'Is CentOS5's
ipsec-tools (ipsec-tools-0.6.5-8.el5) can config to use IPComp compression
with Tunnel mode?' I use 'setkey -f test.conf' command to set up SAD and SPD
database on my IPv4 channel. At first, I just trying whether I can add the
database like this on one side of end terminal (ip 192.168.0.99)....
test.conf <<EOF
flush;
spdflush;

add 192.168.0.99 192.168.0.218 ipcomp 1000
-m tunnel
-C deflate ;

add 192.168.0.218 192.168.0.99 ipcomp 1001
-m tunnel
-C deflate ;

spdadd 192.168.0.99 192.168.0.218 any
-P out ipsec ipcomp/tunnel/192.168.0.99-192.168.0.218/use ;

spdadd 192.168.0.218 192.168.0.99 any
-P in ipsec ipcomp/tunnel/192.168.0.218-192.168.0.99/use ;
EOF
'setkey -f test.conf' fail at both '-m tunnel' line with 
"The result of line 3: Invalid argument.
The result of line 7: Invalid argument. "
So I wonder above mentioned problem because when I test this on the other
side terminal which use Debian(Etch), it seems to work correctly with this
kind of setting. What is wrong ? Syntax? Protocol ?
After searching internet for a while about this problem, I can not found any
topic helpful but I see some of them said IPSec in IPComp Tunnel mode maybe
not working correctly. I just want to know whether this quote is
true.........
Any comments are welcome, I'm curiously waiting the answer.....
Thanks in advance,
Cheers,

-- 
View this message in context: http://www.nabble.com/IPSec-with-IPComp-Tunnel-Mode-tf4548343.html#a12979181
Sent from the IETF - Ipsec mailing list archive at Nabble.com.



_______________________________________________
IPsec mailing list
IPsec@ietf.org
https://www1.ietf.org/mailman/listinfo/ipsec