diff options
| author | Martin Willi <martin@revosec.ch> | 2013-05-16 13:32:48 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2013-06-11 15:54:25 +0200 |
| commit | 44d9970f4c1205afa280fcb5f90897a512f90c62 (patch) | |
| tree | 5cc2b824caeef4c8e5442010e12231a581328180 /src/libcharon/sa/ikev2/tasks/child_create.c | |
| parent | f5f7053bcdb5b25b412a87f5853b4a6d94b8abe8 (diff) | |
| download | strongswan-44d9970f4c1205afa280fcb5f90897a512f90c62.tar.bz2 strongswan-44d9970f4c1205afa280fcb5f90897a512f90c62.tar.xz | |
Allow IPComp on NATed connections, both for IKEv1 and IKEv2
While this was problematic in earlier releases, it seems that it works just
fine the way we handle compression now. So there is no need to disable it over
NATed connections or when using forceencaps.
Diffstat (limited to 'src/libcharon/sa/ikev2/tasks/child_create.c')
| -rw-r--r-- | src/libcharon/sa/ikev2/tasks/child_create.c | 7 |
1 files changed, 0 insertions, 7 deletions
diff --git a/src/libcharon/sa/ikev2/tasks/child_create.c b/src/libcharon/sa/ikev2/tasks/child_create.c index 5a2c05d99..4e66c3f29 100644 --- a/src/libcharon/sa/ikev2/tasks/child_create.c +++ b/src/libcharon/sa/ikev2/tasks/child_create.c @@ -678,13 +678,6 @@ static void build_payloads(private_child_create_t *this, message_t *message) static void add_ipcomp_notify(private_child_create_t *this, message_t *message, u_int8_t ipcomp) { - if (this->ike_sa->has_condition(this->ike_sa, COND_NAT_ANY)) - { - DBG1(DBG_IKE, "IPComp is not supported if either peer is natted, " - "IPComp disabled"); - return; - } - this->my_cpi = this->child_sa->alloc_cpi(this->child_sa); if (this->my_cpi) { |