From cc48f36084a94bc531c05958b5495d0cf1bbbb1d Mon Sep 17 00:00:00 2001 From: Martin Willi Date: Mon, 17 Sep 2012 11:48:31 +0200 Subject: [PATCH] Add unity plugin NEWS --- NEWS | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/NEWS b/NEWS index 6d11762dc7..7b2b6f3e3e 100644 --- a/NEWS +++ b/NEWS @@ -23,6 +23,13 @@ strongswan-5.0.1 PAM directly anymore, but can use any XAuth backend to verify credentials, including xauth-pam. +- The new unity plugin brings support for some parts of the IKEv1 Cisco Unity + Extension. As client, charon narrows traffic selectors to the received + Split-Include attributes and automatically installs IPsec bypass policies + for received Local-LAN attributes. As server, charon sends Split-Include + attributes for leftsubnet definitions containing multiple subnets to Unity- + aware clients. + - An EAP-Nak payload is returned by clients if the gateway requests an EAP method that the client does not support. Clients can also request a specific EAP method by configuring that method with leftauth. -- 2.47.3