Bug 273261
| Summary: | using ipsec-tools for remote-access client connection to Cisco ASA | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Gabriel Somlo <somlo> |
| Component: | ipsec-tools | Assignee: | Karl Wirth <kwirth> |
| Status: | CLOSED NEXTRELEASE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | medium | Docs Contact: | |
| Priority: | medium | ||
| Version: | 9 | ||
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | All | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2008-11-07 02:58:19 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Attachments: | |||
|
Description
Gabriel Somlo
2007-08-31 20:53:12 UTC
Created attachment 184001 [details]
contents of file described in 'additional info' section of original report
Everything except the dupmode patch has been put into rawhide. The dupmode patch wasn't accepted by upstream, but the others were. This bz is now just for the dupmode patch, the others have been added. I'm going to set this as needinfo from the reporter, and when upstream has resolved the patch, please set it back to me. Thanks. Turns out the dupmode patch is unnecessary. We can work around that problem by simply having the phase1_up script check for a previous execution (i.e., whether the private VPN address has already been configured on the default network interface). I'm uploading a new version of the p1_up_down script which contains this check. The ipsec-tools maintainers also took issue with the ipcalc-based conversion of dotted-quad netmask into CIDR notation, and a patch (also uploaded) was applied to CVS which supplies the phase1 script with a list of split networks directly in CIDR notation. Created attachment 232941 [details]
fixed roadwarrior phase1 script
new script now checks for an already completed previous phase1_up execution
also eliminated conversion from dotted quad netmask to cidr notation as
that functionality is being directly offered by racoon
Created attachment 232951 [details]
offer list of split networks in CIDR notation to phase1 scripts
this is already in CVS, and is also required by fixed phase1 p1_up_down script
I'm sorry, I meant to get this change in with otehr recent patches. It's in rawhide now, as after that's tested a bit I'll put it in F-8 also. ipsec-tools-0.7-8.fc8 has been submitted as an update for Fedora 8 ipsec-tools-0.7-8.fc8 has been pushed to the Fedora 8 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update ipsec-tools'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F8/FEDORA-2008-2661 Changing version to '9' as part of upcoming Fedora 9 GA. More information and reason for this action is here: http://fedoraproject.org/wiki/BugZappers/HouseKeeping ipsec-tools-0.7.1-5.fc8 has been submitted as an update for Fedora 8. http://admin.fedoraproject.org/updates/ipsec-tools-0.7.1-5.fc8 ipsec-tools-0.7.1-5.fc8 has been pushed to the Fedora 8 stable repository. If problems still persist, please make note of it in this bug report. |