diff options
| author | Martin Willi <martin@strongswan.org> | 2006-07-05 14:13:45 +0000 |
|---|---|---|
| committer | Martin Willi <martin@strongswan.org> | 2006-07-05 14:13:45 +0000 |
| commit | efa40c11e49d16f5513f7678d20beb71979ed019 (patch) | |
| tree | 7af9ea44ba4a759f46a071b60edd2ccd4ad33b32 /NEWS | |
| parent | d109b48968c8f05d0530500af2bcad1c414ac17e (diff) | |
| download | strongswan-efa40c11e49d16f5513f7678d20beb71979ed019.tar.bz2 strongswan-efa40c11e49d16f5513f7678d20beb71979ed019.tar.xz | |
updated NEWS
Diffstat (limited to 'NEWS')
| -rw-r--r-- | NEWS | 17 |
1 files changed, 17 insertions, 0 deletions
@@ -1,3 +1,20 @@ +- added dead peer detection which checks aliveness of remote peer if no + IKE or ESP traffic is received. Support for dpdaction, dpddelay??? + +- Added support for leftprotoport/rightprotoport parameters in IKEv2. IKEv2 + would offer more possibilities for traffic selection, but the Linux kernel + currently does not support it. That's why we stick with these simple + ipsec.conf rules for now. + +- Initial NAT traversal support in IKEv2. Charon includes NAT detection + notify payloads to detect NAT routers between the peers. It switches + to port 4500, uses UDP encapsulated ESP packets, handles peer address + changes gracefully and sends keep alive message periodically. + +- Reimplemented IKE_SA state machine for charon, which allows simultaneous + rekeying, more shared code, cleaner design, proper retransmission + and a more extensible code base. + strongswan-4.0.2 ---------------- |