Date: Mon, 9 Aug 2004 15:07:54 +0200 From: Alexander Leidinger <Alexander@Leidinger.net> To: Hannes Mehnert <hannes@mehnert.org> Cc: current@freebsd.org Subject: Re: IPSec + 5.2.current Problem Message-ID: <20040809150754.13ca108a@Magellan.Leidinger.net> In-Reply-To: <20040809112700.GB659@mehnert.org> References: <200408080622.i786Mnhe017474@www1.pochta.ru> <20040808132524.GB1033@mehnert.org> <20040808155623.2fa6fb4b@Magellan.Leidinger.net> <20040809112700.GB659@mehnert.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 9 Aug 2004 13:27:00 +0200 Hannes Mehnert <hannes@mehnert.org> wrote: > > So you're able to transfer data over the tunnel with IPSEC? > > Yes, I'm able to transfer packets with IPSEC and IPSEC_ESP (just > verified this). But I use FAST_IPSEC because i have a soekris vpn1411 > (http://www.soekris.com/vpn1401.htm). > > I also had some problems with IPSEC and IPSEC_ESP, changing require > to use in the policies fixed that. With require racoon was not able > to initiate phase 1, because all non esp traffic was dropped. I think this is a datapoint... I use a "require" policy too. ATM I can't test with "use" instead. Bye, Alexander. -- I'm available to get hired (preferred in .lu). http://www.Leidinger.net Alexander @ Leidinger.net GPG fingerprint = C518 BC70 E67F 143F BE91 3365 79E2 9C60 B006 3FE7
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040809150754.13ca108a>