diff options
| author | Christian Poessinger <christian@poessinger.com> | 2018-08-08 18:34:58 +0200 |
|---|---|---|
| committer | Christian Poessinger <christian@poessinger.com> | 2018-08-08 18:38:04 +0200 |
| commit | e6648cebe1a19f3becf1553b45ec2b9337332e65 (patch) | |
| tree | 7593e5da4fb48288b46e4ec389a6c1aedf3b3926 /scripts/vpn-ppp-up | |
| parent | ac3e95a9fce6ce8fc9592072a66fcf140f123e36 (diff) | |
| download | vyatta-cfg-vpn-e6648cebe1a19f3becf1553b45ec2b9337332e65.tar.gz vyatta-cfg-vpn-e6648cebe1a19f3becf1553b45ec2b9337332e65.zip | |
T767: cleanup vpn-config.pl - removal of KLIPS
Two IPsec kernel stacks are currently available: KLIPS and NETKEY. The
Linux kernel NETKEY code is a rewrite from scratch of the KAME IPsec
code. The KAME Project was a group effort of six companies in Japan to
provide a free IPv6 and IPsec (for both IPv4 and IPv6) protocol stack
implementation for variants of the BSD UNIX computer operating system.
KLIPS is not a part of the Linux kernel. When using KLIPS, you must
apply a patch to the kernel to support NAT-T. When using NETKEY, NAT-T
support is already inside the kernel, and there is no need to patch the
kernel. [1]
KLIPS part has been removed as we always used the NETKEY path in the
Perl script.
[1]: https://www.linuxjournal.com/article/9916
Diffstat (limited to 'scripts/vpn-ppp-up')
0 files changed, 0 insertions, 0 deletions