Re: [ovs-dev] [PATCH v2] ovs-monitor-ipsec: Add force-encapsulation option to force NAT-T

2022-04-26 Thread Ilya Maximets
On 3/1/22 16:52, Andreas Karis wrote: > Both LibreSwan and OpenSwan allow administrators to unconditionally > force enable NAT-T for ESP. This may help to surmount restrictive > firewalls in scenarios where IP protocol number 50 is blocked, but where > NAT autodetection fails. Add a switch

Re: [ovs-dev] [PATCH v2] ovs-monitor-ipsec: Add force-encapsulation option to force NAT-T

2022-03-01 Thread Mike Pattrick
On Tue, Mar 1, 2022 at 10:53 AM Andreas Karis wrote: > > Both LibreSwan and OpenSwan allow administrators to unconditionally > force enable NAT-T for ESP. This may help to surmount restrictive > firewalls in scenarios where IP protocol number 50 is blocked, but where > NAT autodetection fails.

[ovs-dev] [PATCH v2] ovs-monitor-ipsec: Add force-encapsulation option to force NAT-T

2022-03-01 Thread Andreas Karis
Both LibreSwan and OpenSwan allow administrators to unconditionally force enable NAT-T for ESP. This may help to surmount restrictive firewalls in scenarios where IP protocol number 50 is blocked, but where NAT autodetection fails. Add a switch --force-encapsulation to expose this feature to users