IPSec and compression

[Vladislav Gagarin]

Hi All.

I can't resolve little problem. Couple of words about.
I've 2 offices in different cities. I need connect them via VPN. I'd 
read Handbook article "10.10 VPN over IPsec" and did all exactly. Fine, 
i have secured channel but ... without compression. I can't do 
compression. I'd tried do so

spdadd A.B.C.D/32 W.X.Y.Z/32 ipencap -P out ipsec 
ipcomp/tunnel/A.B.C.D-W.X.Y.Z/require
                esp/tunnel/A.B.C.D-W.X.Y.Z/require;
spdadd W.X.Y.Z/32 A.B.C.D/32 ipencap -P in ipsec 
esp/tunnel/W.X.Y.Z-A.B.C.D/require
            ipcomp/tunnel/W.X.Y.Z-A.B.C.D/require;
This work fine without "ipcomp". May be i should add additional rules to 
firewall?

-- 
Best regards
Vladislav Gagarin mailto:vlad at perfi.com