Messages in this thread | | | Subject | kernel routing of IPSec / VMWare | From | "Brian C. Huffman" <> | Date | 04 Jun 2002 01:19:53 -0400 |
| |
All,
This may not be the place, but I've been struggling w/ a problem w/ VMWare for quite some time. Their support has not been helpful and I have not found anything by searching the net.
Is there some reason that linux does not route all IPSec traffic? I've tried NATing using both IPtables and using the new built-in NAT that comes with the latest versions of VMWare and I can never get it to work w/ CheckPoint's SecurRemote product. When I do a "bridged" ethernet (in VMWare), it always works. Looking at the packets, it seems as though it might not be passing some of the ESP packets.
The way that we have checkpoint setup it is doing UDP encapsulation of the IPSec (otherwise it would not be possible to do this w/ NAT). This is with all the latest 2.4 kernels (haven't tried 2.4.19, though).
Any suggestions would be helpful.
Thanks, Brian
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |