Date: Tue, 05 Mar 2002 19:05:25 +0900 From: Shoichi Sakane <sakane@kame.net> To: mlists@daydreamer.dk Cc: freebsd-security@FreeBSD.ORG Subject: Re: Racoon/sainfo - 'no policy found' Message-ID: <20020305190525E.sakane@kame.net> In-Reply-To: Your message of "Tue, 5 Mar 2002 10:43:10 %2B0100" <002401c1c42a$29b4cd70$0301a8c0@dpws> References: <002401c1c42a$29b4cd70$0301a8c0@dpws>
next in thread | previous in thread | raw e-mail | index | archive | help
> > the message means the SPD entry to be used this negotiation has > > different ipsec tunnel end points, such like > > spdadd X Y any -P out ipsec > > esp/tunnel/A-B/use > > esp/tunnel/A-C/use; > Uhm, i've read and kind of docs about the last parameter on the spdadd > (use/unique/etc/) but is it explained anywhere when i use what and why? > If i wanna set up a box as a concentrator what parm do i use then? although i haven't understood what you mean, the kernel can understand the SP entry which is defined different ipsec tunnel end points. when you configure propoer SAs by using setkey(8) against such SP entry, you will get a nested IPsec tunnel. but racoon just doesn't support it as i said. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020305190525E.sakane>