Re: Transport Mode ipsec(4) and inet6(4) gre(4) (WAS: isakmpd + gre crashing)

2008-12-26 Thread Todd T. Fries
As mentioned in another post to this list recently I use IPv6 to secure my tunnels when roaming to get pre-allocated IPv6 on my laptop.. Look for 'totd' in the subject and I think you'll see some useful examples. Thanks, -- Todd Fries .. t...@fries.net _

Re: Transport Mode ipsec(4) and inet6(4) gre(4)

2008-12-25 Thread Brian A. Seklecki
I haven't looked if we have support, but gre(4) w/ ipv6 address and stf(4) seem to be best options out there for secure v6 tunnels. That sounds... bizarre. According to ipv6book.ca, M. Blanchet. It's a good read, except OpenBSD/NetBSD are neglected (probably becase of the stf(4)/6to4(4) ab

Re: Transport Mode ipsec(4) and inet6(4) gre(4)

2008-12-25 Thread Christian Weisgerber
Brian A. Seklecki wrote: > I haven't looked if we have support, but gre(4) w/ ipv6 address and stf(4) > seem to be best options out there for secure v6 tunnels. That sounds... bizarre. > I'm wondering if a tranditional ipv6 isakmp(8) ipsec tunnel (using IPv4 > enpoints?!) is a safe alternativ

Transport Mode ipsec(4) and inet6(4) gre(4) (WAS: isakmpd + gre crashing)

2008-12-24 Thread Brian A. Seklecki
All: Back in 01/2006, circa 3.8, there was a thread related to the use of gre(4) and Transport Mode ipsec(4) in isakmpd(8) to protect v4 tunnels. There was a repeatable kernel panic related to gre(4) packets needing a smaller MTU as they are encapsualted in ipsec(4) packets, before being tra