From owner-freebsd-security@FreeBSD.ORG  Fri Jan 16 10:10:53 2004
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Delivered-To: freebsd-security@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 55EC916A4CF; Fri, 16 Jan 2004 10:10:53 -0800 (PST)
Received: from smtp3.sentex.ca (smtp3.sentex.ca [64.7.153.18])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 415A943D55; Fri, 16 Jan 2004 10:10:52 -0800 (PST)
	(envelope-from mike@sentex.net)
Received: from lava.sentex.ca (pyroxene.sentex.ca [199.212.134.18])
	by smtp3.sentex.ca (8.12.10/8.12.10) with ESMTP id i0GIAmU7028014;
	Fri, 16 Jan 2004 13:10:48 -0500 (EST)
	(envelope-from mike@sentex.net)
Received: from simian.sentex.net (simeon.sentex.ca [192.168.43.27])
	by lava.sentex.ca (8.12.9p2/8.12.9) with ESMTP id i0GIAoXw028098;
	Fri, 16 Jan 2004 13:10:50 -0500 (EST)
	(envelope-from mike@sentex.net)
Message-Id: <6.0.1.1.0.20040116122719.05c75910@209.112.4.2>
X-Sender: mdtpop@209.112.4.2 (Unverified)
X-Mailer: QUALCOMM Windows Eudora Version 6.0.1.1
Date: Fri, 16 Jan 2004 13:10:00 -0500
To: security@freebsd.org
From: Mike Tancsa <mike@sentex.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
X-Virus-Scanned: by amavisd-new
Subject: HiFn  / FAST_IPSEC question
X-BeenThere: freebsd-security@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Security issues [members-only posting]
	<freebsd-security.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-security>
List-Post: <mailto:freebsd-security@freebsd.org>
List-Help: <mailto:freebsd-security-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-security>,
	<mailto:freebsd-security-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 16 Jan 2004 18:10:53 -0000

Hi,
	Just got some of the new Soekris 1401 VPN cards based on the hifn 7955 chip.

hifn0 mem 0xe8510000-0xe8517fff,0xe8518000-0xe8519fff,0xe851a000-0xe851afff 
irq 5 at device 0.0 on pci1
hifn0: Hifn 7955, rev 0, 32KB dram, 64 sessions

vs

hifn0 mem 0xeb902000-0xeb902fff,0xeb901000-0xeb901fff irq 10 at device 8.0 
on pci0
hifn0: Hifn 7951, rev 0, 128KB sram, 193 sessions


When it says "n sessions" how does that specifically impact IPSEC ? Does it 
really mean I can only have 64 SAs ?

	---Mike
--------------------------------------------------------------------
Mike Tancsa,                          	          tel +1 519 651 3400
Sentex Communications,     			  mike@sentex.net
Providing Internet since 1994                    www.sentex.net
Cambridge, Ontario Canada			  www.sentex.net/mike