From owner-freebsd-current@FreeBSD.ORG Mon Sep 27 06:22:44 2004 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 8470316A4CE for ; Mon, 27 Sep 2004 06:22:44 +0000 (GMT) Received: from mallaury.noc.nerim.net (smtp-101-monday.noc.nerim.net [62.4.17.101]) by mx1.FreeBSD.org (Postfix) with ESMTP id 47CE343D31 for ; Mon, 27 Sep 2004 06:22:43 +0000 (GMT) (envelope-from bettan@nerim.net) Received: from danielle (linux-win.com [62.212.121.38]) by mallaury.noc.nerim.net (Postfix) with SMTP id 90AB362DB8; Mon, 27 Sep 2004 08:22:40 +0200 (CEST) Message-ID: <002401c4a45a$642b7cc0$0301a8c0@danielle> From: "cell" To: "cell" , "Arne Schwabe" References: <003601c4a2ea$d660c690$0301a8c0@danielle><86oejuzdrw.fsf@kamino.rfc1149.org> <001001c4a305$d003a400$0301a8c0@danielle> Date: Mon, 27 Sep 2004 08:22:40 +0200 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1437 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441 cc: freebsd-current@freebsd.org Subject: Re: ipsec and freebsd 5.3-beta X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 27 Sep 2004 06:22:44 -0000 I have always the same problem.I'm on freebsd 5.3-beta 5 and i have put the patch for key.c who is in cvweb but i have that : # /usr/local/sbin/racoon -F -v Foreground mode. 2004-09-27 08:20:14: INFO: main.c:172:main(): @(#)package version freebsd-20040818a 2004-09-27 08:20:14: INFO: main.c:174:main(): @(#)internal version 20001216 sakane@kame.net 2004-09-27 08:20:14: INFO: main.c:175:main(): @(#)This product linked OpenSSL 0.9.7d 17 Mar 2004 (http://www.openssl.org/) 2004-09-27 08:20:15: WARNING: cftoken.l:514:yywarn(): /usr/local/etc/racoon/racoon.conf:66: "support_mip6" it is obsoleted. use "support_proxy". 2004-09-27 08:20:15: INFO: isakmp.c:1368:isakmp_open(): fe80::2bd:3eff:fe04:1%tap1[500] used as isakmp port (fd=5) 2004-09-27 08:20:15: INFO: isakmp.c:1368:isakmp_open(): fe80::2bd:39ff:fe04:0%tap0[500] used as isakmp port (fd=6) 2004-09-27 08:20:15: INFO: isakmp.c:1368:isakmp_open(): 62.212.121.38[500] used as isakmp port (fd=7) 2004-09-27 08:20:15: INFO: isakmp.c:1368:isakmp_open(): fe80::20a:5eff:fe3e:ebf7%tun0[500] used as isakmp port (fd=8) 2004-09-27 08:20:15: INFO: isakmp.c:1368:isakmp_open(): fe80::1%lo0[500] used as isakmp port (fd=9) 2004-09-27 08:20:15: INFO: isakmp.c:1368:isakmp_open(): ::1[500] used as isakmp port (fd=10) 2004-09-27 08:20:15: INFO: isakmp.c:1368:isakmp_open(): 127.0.0.1[500] used as isakmp port (fd=11) 2004-09-27 08:20:15: INFO: isakmp.c:1368:isakmp_open(): fe80::205:5dff:fea2:98ef%vr1[500] used as isakmp port (fd=12) 2004-09-27 08:20:15: INFO: isakmp.c:1368:isakmp_open(): 10.0.0.1[500] used as isakmp port (fd=13) 2004-09-27 08:20:15: INFO: isakmp.c:1368:isakmp_open(): fe80::205:5dff:fe64:5a87%vr0[500] used as isakmp port (fd=14) 2004-09-27 08:20:15: INFO: isakmp.c:1368:isakmp_open(): 192.168.3.1[500] used as isakmp port (fd=15) 2004-09-27 08:20:15: INFO: isakmp.c:1368:isakmp_open(): 2001:7a8:3d26::1[500] used as isakmp port (fd=16) 2004-09-27 08:20:15: INFO: isakmp.c:1368:isakmp_open(): fe80::20a:5eff:fe3e:ebf7%xl0[500] used as isakmp port (fd=17) 2004-09-27 08:20:15: INFO: isakmp.c:1368:isakmp_open(): 192.168.1.1[500] used as isakmp port (fd=18) 2004-09-27 08:20:19: INFO: isakmp.c:904:isakmp_ph1begin_r(): respond new phase 1 negotiation: 192.168.3.1[500]<=>192.168.3.3[500] 2004-09-27 08:20:19: INFO: isakmp.c:909:isakmp_ph1begin_r(): begin Identity Protection mode. 2004-09-27 08:20:19: INFO: vendorid.c:128:check_vendorid(): received Vendor ID: MS NT5 ISAKMPOAKLEY 2004-09-27 08:20:19: WARNING: ipsec_doi.c:3064:ipsecdoi_checkid1(): ID type mismatched. 2004-09-27 08:20:19: WARNING: ipsec_doi.c:3112:ipsecdoi_checkid1(): ID value mismatched. 2004-09-27 08:20:19: INFO: isakmp.c:2459:log_ph1established(): ISAKMP-SA established 192.168.3.1[500]-192.168.3.3[500] spi:89a9546f383b9559:4baf291311fbf720 2004-09-27 08:20:19: INFO: isakmp.c:1059:isakmp_ph2begin_r(): respond new phase 2 negotiation: 192.168.3.1[0]<=>192.168.3.3[0] 2004-09-27 08:20:19: ERROR: pfkey.c:1076:pk_sendupdate(): libipsec failed send update (No buffer space available) 2004-09-27 08:20:19: ERROR: isakmp_quick.c:1615:quick_r3prep(): pfkey update failed. 2004-09-27 08:20:19: ERROR: isakmp.c:750:quick_main(): failed to process packet. 2004-09-27 08:20:19: ERROR: isakmp.c:541:isakmp_main(): phase2 negotiation failed. 2004-09-27 08:21:20: INFO: isakmp.c:1526:isakmp_ph1expire(): ISAKMP-SA expired 192.168.3.1[500]-192.168.3.3[500] spi:89a9546f383b9559:4baf291311fbf720 2004-09-27 08:21:21: INFO: isakmp.c:1574:isakmp_ph1delete(): ISAKMP-SA deleted 192.168.3.1[500]-192.168.3.3[500] spi:89a9546f383b9559:4baf291311fbf720 ----- Original Message ----- From: "cell" To: "Arne Schwabe" Cc: Sent: Saturday, September 25, 2004 3:44 PM Subject: Re: ipsec and freebsd 5.3-beta > I write MSIZE=512 in my config kernel ? > ----- Original Message ----- > From: "Arne Schwabe" > To: "cell" > Cc: > Sent: Saturday, September 25, 2004 3:20 PM > Subject: Re: ipsec and freebsd 5.3-beta > > > > "cell" writes: > > > > > hello , i tried to configure ipsec in my freebsd with racoon for a wifi > connection with a laptop on windows xp home but i have problem.I have used > this tutorial http://ezine.daemonnews.org/200401/wifi-ipsec.html and when i > run racoon with "racoon -F -v" j'ai : > > > > > > # racoon -F -v > > > Foreground mode. > > > 2004-09-25 12:19:27: INFO: main.c:172:main(): @(#)package version > freebsd-20040818a > > > 2004-09-25 12:19:27: INFO: main.c:174:main(): @(#)internal version > 20001216 sakane@kame.net > > > 2004-09-25 12:19:27: INFO: main.c:175:main(): @(#)This product linked > OpenSSL 0.9.7d 17 Mar 2004 (http://www.openssl.org/) > > > 2004-09-25 12:19:27: WARNING: cftoken.l:514:yywarn(): > /usr/local/etc/racoon/racoon.conf:66: "support_mip6" it is obsoleted. use > "support_proxy". > > > 2004-09-25 12:19:27: INFO: isakmp.c:1368:isakmp_open(): > fe80::2bd:fbff:fe03:1%tap1[500] used as isakmp port (fd=5) > > > 2004-09-25 12:19:27: INFO: isakmp.c:1368:isakmp_open(): > fe80::2bd:f7ff:fe03:0%tap0[500] used as isakmp port (fd=6) > > > 2004-09-25 12:19:27: INFO: isakmp.c:1368:isakmp_open(): > 62.212.121.38[500] used as isakmp port (fd=7) > > > 2004-09-25 12:19:27: INFO: isakmp.c:1368:isakmp_open(): > fe80::20a:5eff:fe3e:ebf7%tun0[500] used as isakmp port (fd=8) > > > 2004-09-25 12:19:27: INFO: isakmp.c:1368:isakmp_open(): fe80::1%lo0[500] > used as isakmp port (fd=9) > > > 2004-09-25 12:19:27: INFO: isakmp.c:1368:isakmp_open(): ::1[500] used as > isakmp port (fd=10) > > > 2004-09-25 12:19:27: INFO: isakmp.c:1368:isakmp_open(): 127.0.0.1[500] > used as isakmp port (fd=11) > > > 2004-09-25 12:19:27: INFO: isakmp.c:1368:isakmp_open(): > fe80::205:5dff:fea2:98ef%vr1[500] used as isakmp port (fd=12) > > > 2004-09-25 12:19:27: INFO: isakmp.c:1368:isakmp_open(): 10.0.0.1[500] > used as isakmp port (fd=13) > > > 2004-09-25 12:19:27: INFO: isakmp.c:1368:isakmp_open(): > fe80::205:5dff:fe64:5a87%vr0[500] used as isakmp port (fd=14) > > > 2004-09-25 12:19:27: INFO: isakmp.c:1368:isakmp_open(): 192.168.3.1[500] > used as isakmp port (fd=15) > > > 2004-09-25 12:19:27: INFO: isakmp.c:1368:isakmp_open(): > 2001:7a8:3d26::1[500] used as isakmp port (fd=16) > > > 2004-09-25 12:19:27: INFO: isakmp.c:1368:isakmp_open(): > fe80::20a:5eff:fe3e:ebf7%xl0[500] used as isakmp port (fd=17) > > > 2004-09-25 12:19:27: INFO: isakmp.c:1368:isakmp_open(): 192.168.1.1[500] > used as isakmp port (fd=18) > > > 2004-09-25 12:20:07: INFO: isakmp.c:904:isakmp_ph1begin_r(): respond new > phase 1 negotiation: 192.168.3.1[500]<=>192.168.3.3[500] > > > 2004-09-25 12:20:07: INFO: isakmp.c:909:isakmp_ph1begin_r(): begin > Identity Protection mode. > > > 2004-09-25 12:20:07: INFO: vendorid.c:128:check_vendorid(): received > Vendor ID: MS NT5 ISAKMPOAKLEY > > > 2004-09-25 12:20:07: WARNING: ipsec_doi.c:3064:ipsecdoi_checkid1(): ID > type mismatched. > > > 2004-09-25 12:20:07: WARNING: ipsec_doi.c:3112:ipsecdoi_checkid1(): ID > value mismatched. > > > 2004-09-25 12:20:07: INFO: isakmp.c:2459:log_ph1established(): ISAKMP-SA > established 192.168.3.1[500]-192.168.3.3[500] > spi:0ae2df7beb89619e:2202b5a1db9ba88a > > > 2004-09-25 12:20:07: INFO: isakmp.c:1059:isakmp_ph2begin_r(): respond > new phase 2 negotiation: 192.168.3.1[0]<=>192.168.3.3[0] > > > 2004-09-25 12:20:07: ERROR: pfkey.c:1076:pk_sendupdate(): libipsec > failed send update (No buffer space available) > > > 2004-09-25 12:20:07: ERROR: isakmp_quick.c:1615:quick_r3prep(): pfkey > update failed. > > > 2004-09-25 12:20:07: ERROR: isakmp.c:750:quick_main(): failed to process > packet. > > > 2004-09-25 12:20:07: ERROR: isakmp.c:541:isakmp_main(): phase2 > negotiation failed. > > > > Look into the "Ipsec broken in 5.3" or something like this a few > > hours ago. > > > > A temporary workaround is to set MSIZE=512 in your kernel config. > > > > Arne > > _______________________________________________ > freebsd-current@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-current > To unsubscribe, send any mail to "freebsd-current-unsubscribe@freebsd.org"