Re: [Design] IPSec in 2.5 Kernel?

"John S. Denker" <jsd@monmouth.com> writes:

> I'm delighted to hear it.
>
> But tell me, how does my security policy get set up
> when my peers have non-static addresses? I know
> about racoon's generate_policy option as mentioned
> in e.g.

Ok, I just looked at the code and tracked down what was going on here. Unfortunately it appears that no, there is no way to set up multiple "anonymous" sessions -- and racoon has no concept of a "road warrior". It assumes that IDs are IP Addresses.

I'll work to fix that.

-derek

-- 
       Derek Atkins
       Computer and Internet Security Consultant
       derek@ihtfp.com             www.ihtfp.com
_______________________________________________
Design mailing list
Design@lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/design