* iproute2 - IPsec ESN support
@ 2012-07-25 6:14 Geanta Neag Horia Ioan-B05471
2012-07-25 9:51 ` Steffen Klassert
0 siblings, 1 reply; 2+ messages in thread
From: Geanta Neag Horia Ioan-B05471 @ 2012-07-25 6:14 UTC (permalink / raw)
To: netdev, linux-crypto; +Cc: Stephen Hemminger, Steffen Klassert
Hello,
Is there any way to create an IPsec tunnel and indicate using
extended sequnce numbers?
It seems that currently iproute2 doesn't support this.
Grepping for "esn" reveals that XFRM_STATE_ESN shows only in kernel headers.
The only relevant thing I found was a RFC sent by Steffen (Cc-ed),
but it was never applied (don't know why):
[RFC] iproute2: Add IPsec extended sequence number support
http://patchwork.ozlabs.org/patch/85962/
Thank you,
Horia
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: iproute2 - IPsec ESN support
2012-07-25 6:14 iproute2 - IPsec ESN support Geanta Neag Horia Ioan-B05471
@ 2012-07-25 9:51 ` Steffen Klassert
0 siblings, 0 replies; 2+ messages in thread
From: Steffen Klassert @ 2012-07-25 9:51 UTC (permalink / raw)
To: Geanta Neag Horia Ioan-B05471; +Cc: netdev, linux-crypto, Stephen Hemminger
On Wed, Jul 25, 2012 at 06:14:52AM +0000, Geanta Neag Horia Ioan-B05471 wrote:
> Hello,
>
> Is there any way to create an IPsec tunnel and indicate using
> extended sequnce numbers?
The strongswan ike deamon supports extended sequnce numbers.
>
> It seems that currently iproute2 doesn't support this.
> Grepping for "esn" reveals that XFRM_STATE_ESN shows only in kernel headers.
>
> The only relevant thing I found was a RFC sent by Steffen (Cc-ed),
> but it was never applied (don't know why):
> [RFC] iproute2: Add IPsec extended sequence number support
I'll take this as a reminder to respin this patch.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2012-07-25 9:51 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2012-07-25 6:14 iproute2 - IPsec ESN support Geanta Neag Horia Ioan-B05471
2012-07-25 9:51 ` Steffen Klassert
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.