Re: IPsec works, but racoon/IKE does not

From: Dan Langille (dan_at_langille.org)
Date: 04/28/04

  • Next message: Greg Troxel: "Re: IPsec - got ESP going, but not AH"
    To: "Bjoern A. Zeeb" <bzeeb-lists@lists.zabbadoz.net>
    Date: Wed, 28 Apr 2004 10:24:25 -0400
    
    

    On 28 Apr 2004 at 4:56, Bjoern A. Zeeb wrote:

    > On Tue, 27 Apr 2004, Dan Langille wrote:
    >
    > > I have no idea whatsoever as to why racoon/IKE does not work here.
    > > I've tried various how-to documents but found nothing that works for
    > > me.
    > >
    > > Gateway (10.0.0.1) running 4.9-stable.
    > > Laptop (10.0.0.10) running 5.2.1-release.
    > ...
    > > I see this on the gateway. Does this mean anything to anyone?
    > > Thanks.
    >
    > not read the log but this is most likly the problem described in this
    > thread (along with solutions):
    >
    > http://lists.freebsd.org/pipermail/freebsd-net/2004-March/003514.html

    Thank you! That was it. IKE just worked after these mods to my
    kernel:

    remove:
    options IPSEC
    options IPSEC_ESP
    options IPSEC_DEBUG
    options INET6

    add:
    options FAST_IPSEC
    device crypto

    man fast_ipsec told me that there is no support for IPv6, which
    eventually led me to remove INET6 when the kernel would not compile.

    -- 
    Dan Langille : http://www.langille.org/
    BSDCan - http://www.bsdcan.org/
    _______________________________________________
    freebsd-security@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-security
    To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
    

  • Next message: Greg Troxel: "Re: IPsec - got ESP going, but not AH"

    Relevant Pages

    • Re: A proposal - binary
      ... In any licensing agreement between two ... and the kernel, so nothing about an ABI is inherantly GPL violating. ... A gateway page or vDSO provided by the hypervisor to the kernel. ...
      (Linux-Kernel)
    • Re: 3 nics in linux box (iptables)
      ... >>eth1 config (on linux machine) ... > First thing that come in mind: you don't need default gateway there. ... > and I'll check the behaviour of the kernel in this particular case. ...
      (comp.os.linux.networking)
    • invisible process
      ... I'm working on a internet gateway for my home based on RH9 ... So I recompiled the kernel with any unuseful thing disabled (ie ... When I connect to this gateway throught sshd, ... ones, and they gon on running, keeping the filesystems busy ...
      (RedHat)
    • tg3 and Interrupt storms
      ... I'm currently using a gentoo box as a gateway for a LAN to manage ... traffic shaping and other small tasks. ... - kernel 2.6.12.5 ...
      (comp.os.linux.networking)
    • Re: Kernel 2.4.25 upgrade broke my network
      ... > Yesterday I downloaded kernel 2.4.25 and rebuilt using make-kpkg. ... I have a local gateway for the 4 machines at home. ... Can your local machines ping your gateway computer? ...
      (Debian-User)