(racoon 613) Re: cisco IOS and racoon

[Satoshi Inoue <inoue@ntes.ipv6.nec.co.jp>]

On Tue, 27 Jul 2004 23:18:29 +1000
"Peter Sandilands" <peter@sandilands.vu> wrote:

> I just got FreeBSD, Racoon  going to a VPN 3000.....

Yes, another implementation from somewhere else, now by Cisco :-)

> my_identifier and peers_identifier both had to be IP addresses (the
> end points obviously)

IDs cannot be used as a policy selector in identity protection mode,
as IDs are exchanged in the 3rd sequence. It may be useful if peer
verification can be done by none IP addressed IDs. IMHO, it's up to
the implementation to decide whether to make this configurable or not.

> Also needed to be main mode rather than aggressive

There are quite a few VPN concentrators that cannot initiate an
aggressive mode, and this is one of it, I suppose.