Return-Path: Received: from relay01.cablecom.net ([62.2.33.101] verified) by mailsvc.com (CommuniGate Pro SMTP 3.5.6) with ESMTP-TLS id 761017 for vasiliy@boulytcheva.com; Wed, 17 Apr 2002 13:14:41 -0700 Received: from smtp.swissonline.ch (mail-4.swissonline.ch [62.2.32.85]) by relay01.cablecom.net (8.11.6/8.11.4/SOL/AWF/MXRELAY/06072001) with ESMTP id g3HKEm285594; Wed, 17 Apr 2002 22:14:48 +0200 (CEST) Received: from zhwin.ch (dclient217-162-112-227.hispeed.ch [217.162.112.227]) by smtp.swissonline.ch (8.11.6/8.11.6/SMTPSOL/AWF/2002040101) with ESMTP id g3HKF3r01924; Wed, 17 Apr 2002 22:15:04 +0200 (MEST) Message-ID: <3CBDD856.BAA330BD@zhwin.ch> Date: Wed, 17 Apr 2002 22:17:26 +0200 From: Andreas Steffen Organization: =?iso-8859-1?Q?Z=FCrcher?= Hochschule Winterthur X-Mailer: Mozilla 4.76 [en] (Win98; U) X-Accept-Language: en MIME-Version: 1.0 To: "John A. Sullivan III" CC: Vasiliy Boulytchev , users@lists.freeswan.org Subject: Re: [Users] DHCP over ipsec References: <006501c1e631$cbf3e7f0$01200cd1@cherepashka> <1019071398.2061.16.camel@jasiiitosh> Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg=sha1; boundary="------------ms523B9088B94F7E2291ED25DD" This is a cryptographically signed message in MIME format. --------------ms523B9088B94F7E2291ED25DD Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Mario Strasser, my assistant at the Zurich University of Applied Sciences in Winterthur (Switzerland) is working on the implementation of the "DHCPv4 Configuration of IPsec Tunnel Mode" published in . We hope to release a first version in about a month. It will be able to cooperate with SSH Sentinel, the only VPN client currently known to me to implement this feature. Regards Andreas "John A. Sullivan III" wrote: > > There are two recent developments in IETF standards that make road > warrior support infinitely easier- NAT traversal and DHCP over IPSec. > We've been investigating this in SSH's products with eager > anticipation. I would love to see this support in Free S/WAN. Is > anyone working on implementing these two new developments? I'm afraid it > is way beyond my skills - John > > On Wed, 2002-04-17 at 13:03, Vasiliy Boulytchev wrote: > > Ladies and Gents, > > Is it possible to have my FreeSWAN box assign IP addresses from the > > protected LAN to the roadwarrior clients that auth in over DHCP? > > Greatly appreciate your help, > > Vasiliy Boulytchev > > Colorado Information Technologies Inc. > -- > John A. Sullivan III > Group Technology Director > Nexus Management > +1 207-985-7880 > John.Sullivan@nexusmgmt.com ====================================================================== Andreas Steffen e-mail: andreas.steffen@zhwin.ch Zuercher Hochschule Winterthur home: http://www.zhwin.ch/~sna/ CH-8401 Winterthur (Switzerland) phone: +41 76 340 25 56 ===============================================================[ZHW]== --------------ms523B9088B94F7E2291ED25DD Content-Type: application/x-pkcs7-signature; name="smime.p7s" Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="smime.p7s" Content-Description: S/MIME Cryptographic Signature MIIH8AYJKoZIhvcNAQcCoIIH4TCCB90CAQExCzAJBgUrDgMCGgUAMAsGCSqGSIb3DQEHAaCC BfswggLKMIICM6ADAgECAgMGC1swDQYJKoZIhvcNAQECBQAwgZIxCzAJBgNVBAYTAlpBMRUw EwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhh d3RlMR0wGwYDVQQLExRDZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwg RnJlZW1haWwgUlNBIDIwMDAuOC4zMDAeFw0wMTExMDcxMjE4NDZaFw0wMjExMDcxMjE4NDZa MGcxEDAOBgNVBAQTB1N0ZWZmZW4xEDAOBgNVBCoTB0FuZHJlYXMxGDAWBgNVBAMTD0FuZHJl YXMgU3RlZmZlbjEnMCUGCSqGSIb3DQEJARYYYW5kcmVhcy5zdGVmZmVuQHpod2luLmNoMIGf MA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDSm8/GsKkIq1WWop1h9Zo7ixizIxzlz3xpXnDs ikwsT4KW1aaLmAiGy9DlOZ0M45+oG4RgXk0cMm17ZlbZVbh+1kkaxMmvLibIAlJKAvj9JzFH iIeVzu2huXPqaPoRu2hmBb3sVpYVYR7uoyCqX24wu6T0UXEXj8QCtgLPkJ9q2wIDAQABo1gw VjAOBgNVHQ8BAf8EBAMCA/gwEQYJYIZIAYb4QgEBBAQDAgWgMCMGA1UdEQQcMBqBGGFuZHJl YXMuc3RlZmZlbkB6aHdpbi5jaDAMBgNVHRMBAf8EAjAAMA0GCSqGSIb3DQEBAgUAA4GBAJIq WtEaC6IcAuzYpfStGC9Vg0UdtMvI6b/+SDP0cfF8m+fTunkC9rLAg+epQANzY6nuZ5rMyNp2 55lJOzaY8YQUk9adpPVjDeQY+EXcGVjv+XdraPR+4T35sz7H+I444gWtE55oJ0PAa/vNqlHE NNBBNFOW9k1G30ov3+cenjcJMIIDKTCCApKgAwIBAgIBDDANBgkqhkiG9w0BAQQFADCB0TEL MAkGA1UEBhMCWkExFTATBgNVBAgTDFdlc3Rlcm4gQ2FwZTESMBAGA1UEBxMJQ2FwZSBUb3du MRowGAYDVQQKExFUaGF3dGUgQ29uc3VsdGluZzEoMCYGA1UECxMfQ2VydGlmaWNhdGlvbiBT ZXJ2aWNlcyBEaXZpc2lvbjEkMCIGA1UEAxMbVGhhd3RlIFBlcnNvbmFsIEZyZWVtYWlsIENB MSswKQYJKoZIhvcNAQkBFhxwZXJzb25hbC1mcmVlbWFpbEB0aGF3dGUuY29tMB4XDTAwMDgz MDAwMDAwMFoXDTAyMDgyOTIzNTk1OVowgZIxCzAJBgNVBAYTAlpBMRUwEwYDVQQIEwxXZXN0 ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhhd3RlMR0wGwYDVQQL ExRDZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwgRnJlZW1haWwgUlNB IDIwMDAuOC4zMDCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA3jMypmPHCSVFPtJueCdn gcXaiBmClw7jRCmKYzUqbXA8+tyu9+50bzC8M5B/+TRxoKNtmPHDT6Jl2w36S/HW3WGl+YXN VZo1Gp2Sdagnrthy+boC9tewkd4c6avgGAOofENCUFGHgzzwObSbVIoTh/+zm51JZgAtCYns lGvpoWkCAwEAAaNOMEwwKQYDVR0RBCIwIKQeMBwxGjAYBgNVBAMTEVByaXZhdGVMYWJlbDEt Mjk3MBIGA1UdEwEB/wQIMAYBAf8CAQAwCwYDVR0PBAQDAgEGMA0GCSqGSIb3DQEBBAUAA4GB AHMbbyZli/8VNEtZYortRL5Jx+gNu4+5DWomKmKEH7iHY3QcbbfPGlORS+HN5jjZ7VD0Omw0 kqzmkpxuwSMBwgmn70uuct0GZ/VQby5YuLYLwVBXtewc1+8XttWIm7eiiBrtOVs5fTT8tpYY JU1q9J3Fw5EvqZa4BTxS/N3pYgNIMYIBvTCCAbkCAQEwgZowgZIxCzAJBgNVBAYTAlpBMRUw EwYDVQQIEwxXZXN0ZXJuIENhcGUxEjAQBgNVBAcTCUNhcGUgVG93bjEPMA0GA1UEChMGVGhh d3RlMR0wGwYDVQQLExRDZXJ0aWZpY2F0ZSBTZXJ2aWNlczEoMCYGA1UEAxMfUGVyc29uYWwg RnJlZW1haWwgUlNBIDIwMDAuOC4zMAIDBgtbMAkGBSsOAwIaBQCgejAYBgkqhkiG9w0BCQMx CwYJKoZIhvcNAQcBMBsGCSqGSIb3DQEJDzEOMAwwCgYIKoZIhvcNAwcwHAYJKoZIhvcNAQkF MQ8XDTAyMDQxNzIwMTcyNlowIwYJKoZIhvcNAQkEMRYEFB5RN7LYj6TacBO5tpRF//GCfRl3 MA0GCSqGSIb3DQEBAQUABIGACumN4F1GASNJjA4K8UjW+TP57yelIQ/OsyzuyMv4q9CVRUoW tf5zkv9jWCCWafblM+bynrsAbS76QhTiD9kVvy+li4joM2bbhpqdnEfcS6A6sgE9Yr8mu46X yh7SUenLdNoC9nIjSlalIbVLl1lK0mRC88IY6E1vCacEfQSqTvc= --------------ms523B9088B94F7E2291ED25DD--