Re: kernel routing of IPSec / VMWare

Petr Vandrovec (VANDROVE@vc.cvut.cz)
Tue, 4 Jun 2002 11:43:48 +0200


On 4 Jun 02 at 1:19, Brian C. Huffman wrote:
>
> The way that we have checkpoint setup it is doing UDP encapsulation of
> the IPSec (otherwise it would not be possible to do this w/ NAT). This
> is with all the latest 2.4 kernels (haven't tried 2.4.19, though).

Can't you push packets over your eth0 MTU with this encapsulation?
It would be useful if you could do 'tcpdump -i vmnet8 & tcpdump -i eth0'
or 'tcpdump -i any' to find what's going on.
Petr Vandrovec
vandrove@vc.cvut.cz

P.S.: Did you tried to ask in VMware newsgroups?

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/