1 config BR2_PACKAGE_IPSEC_TOOLS
3 depends on BR2_USE_MMU # fork()
4 depends on !BR2_TOOLCHAIN_USES_MUSL # Use __P() macro all over the tree
5 select BR2_PACKAGE_OPENSSL
6 select BR2_PACKAGE_FLEX
8 This package is required to support IPSec for Linux 2.6+
10 http://ipsec-tools.sourceforge.net/
12 if BR2_PACKAGE_IPSEC_TOOLS
14 config BR2_PACKAGE_IPSEC_TOOLS_ADMINPORT
16 bool "Enable racoonctl(8)"
18 Lets racoon to listen to racoon admin port, which is to
19 be contacted by racoonctl(8).
21 config BR2_PACKAGE_IPSEC_TOOLS_NATT
22 bool "Enable NAT-Traversal"
24 This needs kernel support, which is available on Linux. On
25 NetBSD, NAT-Traversal kernel support has not been integrated
26 yet, you can get it from here:
28 http://ipsec-tools.sourceforge.net/netbsd_nat-t.diff If you
30 live in a country where software patents are legal, using
31 NAT-Traversal might infringe a patent.
33 config BR2_PACKAGE_IPSEC_TOOLS_FRAG
34 bool "Enable IKE fragmentation"
36 Enable IKE fragmentation, which is a workaround for
37 broken routers that drop fragmented packets
39 config BR2_PACKAGE_IPSEC_TOOLS_DPD
40 bool "Enable DPD (Dead Peer Detection)"
42 Enable dead peer detection support
44 config BR2_PACKAGE_IPSEC_TOOLS_STATS
46 bool "Enable statistics logging function"
48 config BR2_PACKAGE_IPSEC_TOOLS_READLINE
49 select BR2_PACKAGE_READLINE
50 bool "Enable readline input support"
52 config BR2_PACKAGE_IPSEC_TOOLS_HYBRID
53 bool "Enable hybrid, both mode-cfg and xauth support"
55 Hybrid mode is required for successful interoperability
56 (e.g. Cisco VPN Client).
59 prompt "Security context"
60 default BR2_PACKAGE_IPSEC_SECCTX_DISABLE
62 Selects whether or not to enable security context support.
64 config BR2_PACKAGE_IPSEC_SECCTX_DISABLE
65 bool "Disable security context support"
67 config BR2_PACKAGE_IPSEC_SECCTX_ENABLE
68 bool "Enable SELinux security context support"
70 config BR2_PACKAGE_IPSEC_SECCTX_KERNEL
71 bool "Enable kernel security context"