Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 Apr 2004 12:17:20 +0200
From:      Arne Schwabe <arne@rfc2549.org>
To:        Eivind Olsen <eivind@aminor.no>
Cc:        freebsd-current@FreeBSD.org
Subject:   Re: IPSEC, IPv6, RELENG_5_2
Message-ID:  <863c6lbwi7.fsf@kamino.rfc1149.org>
In-Reply-To: <340419687.1083326256@[10.122.7.143]> (Eivind Olsen's message of "Fri, 30 Apr 2004 11:57:36 %2B0200")
References:  <340419687.1083326256@[10.122.7.143]>

index | next in thread | previous in thread | raw e-mail

Eivind Olsen <eivind@aminor.no> writes:

> Hello.
> Does anyone know of a way to make hardware accelerated (Soekris
> vpn1401 card) VPN work on a RELENG_5_2 box (or CURRENT, if need be..)
> and at the same time support IPv6?
>
> I believe I need FAST_IPSEC to get hardware accelerated VPN/IPSEC, and
> it doesn't look like I can compile in both FAST_IPSEC and INET6 at the
> same time in the kernel.
> I have read that FAST_IPSEC doesn't do IPSEC for IPv6 and that's OK
> with me, but I'd still like to be able to use IPv6 for some
> connections and IPSEC for a VPN-connection (running over IPv4).
>
> Anyone who knows if this is somehow possible?

I had no problem compiling both FAST_IPSEC and IPv6 into a current
kernel. If you want I can you my config. But be warned it is a
stripped down config for a soekris router (no ps/2, no vga support,
etc)


yavin:options   INET6                   # IPv6 communications protocols
yavin:options FAST_IPSEC


arne@yavin:~% uname -a
FreeBSD yavin.rfc1149.org 5.2-CURRENT FreeBSD 5.2-CURRENT #0: Thu Apr 22 20:41:02 CEST 2004     arne@kamino.rfc1149.org:/usr/src/sys/i386/compile/yavin  i386

-- 
Ah, the beauty of OSS. Hundreds of volunteers worldwide volunteering
their time inventing and implementing new exciting ways of old fashioned  wheels.


help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?863c6lbwi7.fsf>