Subject: kernel routing of IPSec / VMWare
From: "Brian C. Huffman" <huffman@graze.net>
To: linux-kernel@vger.kernel.org
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Date: 04 Jun 2002 01:19:53 -0400
Message-Id: <1023167993.2914.12.camel@zaphod>
Mime-Version: 1.0
Sender: linux-kernel-owner@vger.kernel.org

All, 

This may not be the place, but I've been struggling w/ a problem w/
VMWare for quite some time.  Their support has not been helpful and I
have not found anything by searching the net.  

Is there some reason that linux does not route all IPSec traffic?  I've
tried NATing using both IPtables and using the new built-in NAT that
comes with the latest versions of VMWare and I can never get it to work
w/ CheckPoint's SecurRemote product.  When I do a "bridged" ethernet (in
VMWare), it always works.  Looking at the packets, it seems as though it
might not be passing some of the ESP packets.  

The way that we have checkpoint setup it is doing UDP encapsulation of
the IPSec (otherwise it would not be possible to do this w/ NAT).  This
is with all the latest 2.4 kernels (haven't tried 2.4.19, though). 

Any suggestions would be helpful. 

Thanks, 
Brian 


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/