Re: Generic IPSEC vpn plugin

[Paul Wouters <paul xelerance com>]

On Tue, 7 Apr 2009, Peter Robinson wrote:

> Is there, or is there planned, a generic IPSEC vpn plugin for
> NetworkManager? I can see support for the cisco vpnc client, and then
> some other various ones. I would have thought with the site-to-site
> ipsec and client side stuff being the major enterprise way of doing
> it, and the kernel having full IPSEC support that there would have
> been a generic ipsec plugin ages ago. And one with profiles for most
> of the common hardware out there
> (cisco/netscreen/alteon/checkpoint/fortigate etc) would be very cool
> :-)

Openswan has a GSoC project submission for this. One of the issues is
the architecture of NM, which focusses on user-based, and the the
architecture of ipsec, which is host-based. This creates some issues,
one of which is where and how to store and pass user/host credentials.

By next week we should know if this project is starting. We did get a
few applications for this.

Paul