[src/netbsd-3]: src/crypto/dist/ipsec-tools/src/racoon/samples/roadwarrior/cl...

[tron <tron%NetBSD.org@localhost>]

details:   https://anonhg.NetBSD.org/src/rev/0c86f27d4a75
branches:  netbsd-3
changeset: 576611:0c86f27d4a75
user:      tron <tron%NetBSD.org@localhost>
date:      Tue Jul 12 17:41:01 2005 +0000

description:
Pull up revision 1.3 (requested by manu in ticket #583):
Add comments on how to use the hook scripts without NAT-T

diffstat:

 crypto/dist/ipsec-tools/src/racoon/samples/roadwarrior/client/phase1-down.sh |  5 +++++
 crypto/dist/ipsec-tools/src/racoon/samples/roadwarrior/client/phase1-up.sh   |  6 ++++++
 2 files changed, 11 insertions(+), 0 deletions(-)

diffs (37 lines):

diff -r 64eb5d99446d -r 0c86f27d4a75 crypto/dist/ipsec-tools/src/racoon/samples/roadwarrior/client/phase1-down.sh
--- a/crypto/dist/ipsec-tools/src/racoon/samples/roadwarrior/client/phase1-down.sh      Tue Jul 12 17:39:36 2005 +0000
+++ b/crypto/dist/ipsec-tools/src/racoon/samples/roadwarrior/client/phase1-down.sh      Tue Jul 12 17:41:01 2005 +0000
@@ -53,9 +53,14 @@
        ;;
 esac
 
+# Use this for a NAT-T setup
 LOCAL="${LOCAL_ADDR}[${LOCAL_PORT}]"
 REMOTE="${REMOTE_ADDR}[${REMOTE_PORT}]"
 
+# Use this for a non NAT-T setup
+#LOCAL="${LOCAL_ADDR}"
+#REMOTE="${REMOTE_ADDR}"
+
 echo "
 deleteall ${REMOTE_ADDR} ${LOCAL_ADDR} esp;
 deleteall ${LOCAL_ADDR} ${REMOTE_ADDR} esp; 
diff -r 64eb5d99446d -r 0c86f27d4a75 crypto/dist/ipsec-tools/src/racoon/samples/roadwarrior/client/phase1-up.sh
--- a/crypto/dist/ipsec-tools/src/racoon/samples/roadwarrior/client/phase1-up.sh        Tue Jul 12 17:39:36 2005 +0000
+++ b/crypto/dist/ipsec-tools/src/racoon/samples/roadwarrior/client/phase1-up.sh        Tue Jul 12 17:41:01 2005 +0000
@@ -46,9 +46,15 @@
        ;;
 esac
 
+# Use this for a NAT-T setup
 LOCAL="${LOCAL_ADDR}[${LOCAL_PORT}]"
 REMOTE="${REMOTE_ADDR}[${REMOTE_PORT}]"
 
+# Use this for a non NAT-T setup
+#LOCAL="${LOCAL_ADDR}"
+#REMOTE="${REMOTE_ADDR}"
+
+
 echo "
 spdadd ${INTERNAL_ADDR4}/32[any] 0.0.0.0/0[any] any
        -P out ipsec esp/tunnel/${LOCAL}-${REMOTE}/require;