Date: Sun, 12 Sep 2004 01:43:28 +0200 From: "Simon L. Nielsen" <simon@FreeBSD.org> To: "Georg-W. Koltermann" <gwk@rahn-koltermann.de> Cc: freebsd-current@freebsd.org Subject: Re: [5.3-BETA3] no IPSEC connection to 5.2.1 box Message-ID: <20040911234328.GC770@zaphod.nitro.dk> In-Reply-To: <1094945709.15216.4.camel@localhost.muc.eu.mscsoftware.com> References: <1094945709.15216.4.camel@localhost.muc.eu.mscsoftware.com>
next in thread | previous in thread | raw e-mail | index | archive | help
--2oS5YaxWCcQjTEyO Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On 2004.09.12 01:35:09 +0200, Georg-W. Koltermann wrote: > I don't get my IPSEC connection to run. This system is 5.3-BETA3, the > other system is 5.2.1. Both use FAST_IPSEC. Keys are negotiated by > racoon. >=20 > This system logs: >=20 [...] > Sep 12 01:30:29 hunter racoon: INFO: isakmp.c:952:isakmp_ph2begin= _i(): initiate new phase 2 negotiation: 10.0.0.3[0]<=3D>10.0.0.2[0] > Sep 12 01:30:29 hunter racoon: ERROR: pfkey.c:1076:pk_sendupdate(= ): libipsec failed send update (No buffer space available) This is a known problem. A workaround is to set options MSIZE=3D512 in your kernel configuration file. --=20 Simon L. Nielsen FreeBSD Documentation Team --2oS5YaxWCcQjTEyO Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (FreeBSD) iD8DBQFBQ42gh9pcDSc1mlERAn6rAJ4x6qX4TcGjWUt33bwdrfo9GKgi1ACfbyS2 8t9AgliVlP02J/58uQ51/7A= =ATGw -----END PGP SIGNATURE----- --2oS5YaxWCcQjTEyO--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040911234328.GC770>