Racoon without compression

[Christopher Rued]

Hi all,

I'm trying to set up a VPN connection to a NetScreen VPN using racoon.
I configured all of the settings (I think) to match those specified on
the NetScreen, except for compression_algorithm.

The only option for compression_algorithm given to me by racoon is
deflate. The NetScreen VPN is configured with "Compression: None".

Am I out of luck here?

Please be sure to inclue me on any replies, as I am not subscibed to the
list.

TIA

--Chris

[Loren M. Lang]

On Tue, Feb 15, 2005 at 06:03:17PM -0500, Christopher Rued wrote:

> Hi all,
>
> I'm trying to set up a VPN connection to a NetScreen VPN using racoon.
> I configured all of the settings (I think) to match those specified on
> the NetScreen, except for compression_algorithm.
>
> The only option for compression_algorithm given to me by racoon is
> deflate. The NetScreen VPN is configured with "Compression: None".
>
> Am I out of luck here?

No, compression is not needed for IPSec. The only compression
algorithm racoon supports is defate, but that doesn't mean it won't run
without compression. The settings in /etc/ipsec.conf are what tell
FreeBSD's IPSec to use or not use compression. ESP is an encryption
layer that you can enable in ipsec.conf and IPComp is a compression
layer, if you only setup ESP then no compression takes place.

>
> Please be sure to inclue me on any replies, as I am not subscibed to the
> list.
>
> TIA
>
> --Chris
>
> _______________________________________________
> [email]freebsd-questions@freebsd.org[/email] mailing list
> [url]http://lists.freebsd.org/mailman/listinfo/freebsd-questions[/url]
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"

--
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: [url]ftp://ftp.tallye.com/pub/lorenl_pubkey.asc[/url]
Fingerprint: B3B9 D669 69C9 09EC 1BCD 835A FAF3 7A46 E4A3 280C