Re: Ipsec - PF_KEY and set_policy

2007-08-04 Thread aditya kiran
Hi George, Thanks a lot for the clarification.. Yeah, i was quite confused with ipsec_set_policy - which has multiple definitions, one which converts the human readable policy format and another one inside the kernel.. doing a little bit of code walk through, it looks like the second one is called

Re: Ipsec - PF_KEY and set_policy

2007-08-04 Thread aditya kiran
HI Blue, Thanks a lot for this info.. It helped me in understanding the difference.. Thanks, Adityaa On 7/26/07, blue <[EMAIL PROTECTED]> wrote: > > As far as I know, setkey is used for IPsec SP and SA configuration. > ipsec_set_policy() could transfer a string to "policy request", which is > def

Re: Ipsec - PF_KEY and set_policy

2007-07-26 Thread George V. Neville-Neil
At Thu, 26 Jul 2007 08:13:02 +0800, blue wrote: > > As far as I know, setkey is used for IPsec SP and SA configuration. > ipsec_set_policy() could transfer a string to "policy request", which is > defined in RFC 2367 PF_KEY. Internally, setkey() will call > ipsec_set_policy() to construct the m

Re: Ipsec - PF_KEY and set_policy

2007-07-25 Thread blue
As far as I know, setkey is used for IPsec SP and SA configuration. ipsec_set_policy() could transfer a string to "policy request", which is defined in RFC 2367 PF_KEY. Internally, setkey() will call ipsec_set_policy() to construct the message then send it down to the kernel. However, ipsec_set