Subject: Re: IPSec and Compression
To: J. Buck Caldwell <buckaroo@liveround.com>
From: None <itojun@iijlab.net>
List: tech-net
Date: 07/30/2003 16:30:49
>Yea... I had that figured. I was kinda hoping for a bit more detail. Given:
>
>IPSEC.CONF:
>spdadd corpaddr branchaddr any -P out ipsec esp/transport//require;
>spdadd branchaddr corpaddr any -P in ipsec esp/transport//require;
>
>Do I just need to add:
>spdadd corpaddr branchaddr any -P out ipsec ipcomp/transport//require;
>spdadd branchaddr corpaddr any -P in ipsec ipcomp/transport//require;
>
>and the appropriate reversal on the other end? Do I need to specify 
>these lines before or after the esp lines, or is ordering handled 
>internally?

	use the following lines for your ipsec.conf.

itojun


spdadd corpaddr branchaddr any -P out ipsec ipcomp/transport//use esp/transport//require;
spdadd branchaddr corpaddr any -P in ipsec ipcomp/transport//use esp/transport//require;