From: Martin Willi Date: Mon, 17 Sep 2012 09:48:31 +0000 (+0200) Subject: Add unity plugin NEWS X-Git-Tag: 5.0.1~82^2~2 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=cc48f36084a94bc531c05958b5495d0cf1bbbb1d;p=thirdparty%2Fstrongswan.git Add unity plugin NEWS --- diff --git a/NEWS b/NEWS index 6d11762dc7..7b2b6f3e3e 100644 --- a/NEWS +++ b/NEWS @@ -23,6 +23,13 @@ strongswan-5.0.1 PAM directly anymore, but can use any XAuth backend to verify credentials, including xauth-pam. +- The new unity plugin brings support for some parts of the IKEv1 Cisco Unity + Extension. As client, charon narrows traffic selectors to the received + Split-Include attributes and automatically installs IPsec bypass policies + for received Local-LAN attributes. As server, charon sends Split-Include + attributes for leftsubnet definitions containing multiple subnets to Unity- + aware clients. + - An EAP-Nak payload is returned by clients if the gateway requests an EAP method that the client does not support. Clients can also request a specific EAP method by configuring that method with leftauth.