From owner-freebsd-net@FreeBSD.ORG  Wed Mar 14 22:42:28 2007
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id B070316A404
	for <freebsd-net@freebsd.org>; Wed, 14 Mar 2007 22:42:28 +0000 (UTC)
	(envelope-from bounces@nabble.com)
Received: from talk.nabble.com (www.nabble.com [72.21.53.35])
	by mx1.freebsd.org (Postfix) with ESMTP id 87B3C13C4B0
	for <freebsd-net@freebsd.org>; Wed, 14 Mar 2007 22:42:28 +0000 (UTC)
	(envelope-from bounces@nabble.com)
Received: from [72.21.53.38] (helo=jubjub.nabble.com)
	by talk.nabble.com with esmtp (Exim 4.50) id 1HRcAt-0002k6-Ix
	for freebsd-net@freebsd.org; Wed, 14 Mar 2007 15:42:27 -0700
Message-ID: <9484186.post@talk.nabble.com>
Date: Wed, 14 Mar 2007 15:42:27 -0700 (PDT)
From: rms_zaphod <tmskeren3@yahoo.com>
To: freebsd-net@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Nabble-From: tmskeren3@yahoo.com
Subject: fbsd amd64 and fast_ipsec
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 14 Mar 2007 22:42:28 -0000


OK, I have used these ken mods for my file server/nat/router/firewall servers
for years. (kern ops then question)

#Mt ****e
options IPFIREWALL
options IPDIVERT
options IPFIREWALL_VERBOSE
options IPSTEALTH
options FAST_IPSEC
#smbfs stuff
options NETSMB
options NETSMBCRYPTO
options LIBMCHAIN
options LIBICONV
options SMBFS
#end smbfs stuff
device crypto

With 6.2, with latest (3.13.07) cvsup -L 2 -h `(fastest_cvsup -q -c us )`
/root/stable-supfile

make buildworld etc...I STILL cannot get setkey nor racoon to function. I
keep getting a pfkey error, and cannot establish a VPN tunnel. I can if I
use:

options IPSEC
options IPSEC_ESP
options IPSEC_DEBUG

But giant mutex is enable...etc. However all was good up to 6.1. Is this
broken in 6.2??
-- 
View this message in context: http://www.nabble.com/fbsd-amd64-and-fast_ipsec-tf3405028.html#a9484186
Sent from the freebsd-net mailing list archive at Nabble.com.