Re: [Swan] libreswan ah+esp

2016-12-01 Thread Кузнецов Константин
Yeah, im really sure that i need AH+ESP. AH provides another level of integrity check, at least it does not not let to change IP src,dst or some ip header values. I did manage to make it work but only with IKEv1. When i prompt ikev2=insist, then it stucks in this messages: 000 #1:

Re: [Swan] libreswan ah+esp

2016-12-01 Thread Paul Wouters
On Thu, 1 Dec 2016, Кузнецов Константин wrote: Sorry, forget to mention that transport mode is using. Hi! I have a Centos 6 and i REALLY NEED to make AH+ESP on libreswan-3.15-5.3.el6.x86_64 Is there any way to do it? I m trying to make 2 conf files one fpr ah and one for esp

Re: [Swan] libreswan ah+esp

2016-12-01 Thread Кузнецов Константин
Sorry, forget to mention that transport mode is using. -- WBR Kuznetsov Konstantin, Engineer e-mail: kkuznet...@web.1tv.ru mobile: +7 905 7111332 01.12.2016 14:14, Кузнецов Константин пишет: Hi! I have a Centos 6 and i REALLY NEED to make AH+ESP on libreswan-3.15-5.3.el6.x86_64 Is