Re: HiFn / FAST_IPSEC question
From: Sam Leffler (sam_at_errno.com)
Date: 01/17/04
- Previous message: Patrick Muldoon: "Re: arp problem in /var/log/messages"
- In reply to: Mike Tancsa: "RE: HiFn / FAST_IPSEC question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
To: Mike Tancsa <mike@sentex.net>, <mhdz@tamaulipas.gob.mx> Date: Sat, 17 Jan 2004 13:33:26 -0800
On Friday 16 January 2004 10:48 am, Mike Tancsa wrote:
> I am more curious about what happens if you try 194 sessions on one or 65
> on the other, not why one is rated lower than the other.
>
When you try to allocate the SPI it will fail because you won't be able to
create a crypto session (this is FAST_IPSEC only). The right thing to do
(probably) is to fallback to s/w crypto but I don't believe the existing
crypto framework is smart enough.
Sam
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
- Previous message: Patrick Muldoon: "Re: arp problem in /var/log/messages"
- In reply to: Mike Tancsa: "RE: HiFn / FAST_IPSEC question"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
