Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 30 Apr 2004 12:17:20 +0200
From:      Arne Schwabe <arne@rfc2549.org>
To:        Eivind Olsen <eivind@aminor.no>
Cc:        freebsd-current@FreeBSD.org
Subject:   Re: IPSEC, IPv6, RELENG_5_2
Message-ID:  <863c6lbwi7.fsf@kamino.rfc1149.org>
In-Reply-To: <340419687.1083326256@[10.122.7.143]> (Eivind Olsen's message of "Fri, 30 Apr 2004 11:57:36 %2B0200")
References:  <340419687.1083326256@[10.122.7.143]>

next in thread | previous in thread | raw e-mail | index | archive | help
Eivind Olsen <eivind@aminor.no> writes:

> Hello.
> Does anyone know of a way to make hardware accelerated (Soekris
> vpn1401 card) VPN work on a RELENG_5_2 box (or CURRENT, if need be..)
> and at the same time support IPv6?
>
> I believe I need FAST_IPSEC to get hardware accelerated VPN/IPSEC, and
> it doesn't look like I can compile in both FAST_IPSEC and INET6 at the
> same time in the kernel.
> I have read that FAST_IPSEC doesn't do IPSEC for IPv6 and that's OK
> with me, but I'd still like to be able to use IPv6 for some
> connections and IPSEC for a VPN-connection (running over IPv4).
>
> Anyone who knows if this is somehow possible?

I had no problem compiling both FAST_IPSEC and IPv6 into a current
kernel. If you want I can you my config. But be warned it is a
stripped down config for a soekris router (no ps/2, no vga support,
etc)


yavin:options   INET6                   # IPv6 communications protocols
yavin:options FAST_IPSEC


arne@yavin:~% uname -a
FreeBSD yavin.rfc1149.org 5.2-CURRENT FreeBSD 5.2-CURRENT #0: Thu Apr 22 20:41:02 CEST 2004     arne@kamino.rfc1149.org:/usr/src/sys/i386/compile/yavin  i386

-- 
Ah, the beauty of OSS. Hundreds of volunteers worldwide volunteering
their time inventing and implementing new exciting ways of old fashioned  wheels.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?863c6lbwi7.fsf>