[Swan] VTI support

Paul Wouters paul at nohats.ca
Sat Jul 9 08:06:08 UTC 2016


On Fri, 8 Jul 2016, Xinwei Hong wrote:

> Is it possible to provide the exact requirements for this feature? which kernel version and which iproute2 version? We want to push this feature to our production and would need to do
> packaging ourselves. 

If I had known it, I would have told you. I just know the versions we
started testing with and those work for sure.

> Also, we currently use racoon+netkey to do policy-based vpn and pluto+klips to do route-based vpn. With this new feature, will we be able to do both with pluto+netkey? How to do
> policy-based VPN without racoon? 

Yes you should be able to do both.

Paul


More information about the Swan mailing list