Hi Andreas,

Thanks for the information.
Now i have little understanding on the arch.
I have configured two linux hosts on IKEv1 based host- host tunnel (referred
the sample config from strongswan website)

>ipsec start
src file : src/starter/starter.c
this file internally calls the  pluto process( plutomain.c). plutomain.c
initializes the ipsec protocols for IKEv1.

>ipsec up <connection-name>
I am not sure , which file is doing the connection management.

But internally i understand src/pluto/ipsec_doi.c functions are used for the
IKEv1 transcations.

Which is the source file calls the IKEv1 functions (ipsec_doi functions) for
establish the IKEv1 based IPSEC tunnel?

Can you please give some light on this.

thanks
suresh






On Thu, Apr 22, 2010 at 6:58 PM, Andreas Steffen <
[email protected]> wrote:

> Hi Suresh,
>
> there is no documentation at all available on the pluto architecture.
> Have a look at demux.c which parses incoming packets and ipsec_doi.c
> which handles the content of the IKEv1 messages. You'll find both
> files in the src/pluto directory.
>
> Regards
>
> Andreas
>
>
> On 22.04.2010 12:46, Suresh Kumar wrote:
>
>> Hi Andreas,
>> I am doing some research on the IKEv1 failure cases and how it can be
>> addressed by software itself. (Assumption: very minmal vpn configuration
>> to establish the IPSEC)
>> For that, I am using the strongswan pluto, and  currently testing the
>> IKEv1 failure cases in strongswan.
>> For Eg: Initiator is IKEv1(default) and responder is IKEv2(strictly
>> confugured) version.
>> This configuration,reponder doenst respond , initiator retransmits and
>> finally stops.
>> For this, try send IKEv2 packet and try..
>>
>> Do we have some documentation for pluto?
>> thansk
>> suresh
>>
>>
> ======================================================================
> Andreas Steffen                         [email protected]
> strongSwan - the Linux VPN Solution!                www.strongswan.org
> Institute for Internet Technologies and Applications
> University of Applied Sciences Rapperswil
> CH-8640 Rapperswil (Switzerland)
> ===========================================================[ITA-HSR]==
>
_______________________________________________
Dev mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/dev

Reply via email to