From owner-freebsd-current@FreeBSD.ORG  Fri Apr 30 10:56:36 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2AEC816A4CE
	for <freebsd-current@freebsd.org>;
	Fri, 30 Apr 2004 10:56:36 -0700 (PDT)
Received: from avalon.linuxpowered.com (avalon.linuxpowered.com
	[64.246.60.115])
	by mx1.FreeBSD.org (Postfix) with ESMTP id BE65B43D7F
	for <freebsd-current@freebsd.org>;
	Fri, 30 Apr 2004 10:56:35 -0700 (PDT)
	(envelope-from diz@linuxpowered.com)
Received: from linuxpowered.com (txirvcom-itnfw01.verizon.com
	[::ffff:192.76.54.20])  (AUTH: CRAM-MD5 diz@linuxpowered.com)
	by avalon.linuxpowered.com with esmtp;
	Fri, 30 Apr 2004 13:07:01 -0500
Message-ID: <40929332.5080704@linuxpowered.com>
Date: Fri, 30 Apr 2004 12:56:02 -0500
From: masta <diz@linuxpowered.com>
Organization: wifibsd.org
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US;
	rv:1.6) Gecko/20040113
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Eivind Olsen <eivind@aminor.no>
References: <340419687.1083326256@[10.122.7.143]>
In-Reply-To: <340419687.1083326256@[10.122.7.143]>
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
cc: freebsd-current@FreeBSD.org
Subject: Re: IPSEC, IPv6, RELENG_5_2
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: masta@wifibsd.org
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 30 Apr 2004 17:56:36 -0000

Howdy,

FAST_IPSEC and hi/fn hardware acceleration are mutually exclusive.
Try without FAST_IPSEC.

-Jon


Eivind Olsen wrote:

> Hello.
> Does anyone know of a way to make hardware accelerated (Soekris 
> vpn1401 card) VPN work on a RELENG_5_2 box (or CURRENT, if need be..) 
> and at the same time support IPv6?
>
> I believe I need FAST_IPSEC to get hardware accelerated VPN/IPSEC, and 
> it doesn't look like I can compile in both FAST_IPSEC and INET6 at the 
> same time in the kernel.
> I have read that FAST_IPSEC doesn't do IPSEC for IPv6 and that's OK 
> with me, but I'd still like to be able to use IPv6 for some 
> connections and IPSEC for a VPN-connection (running over IPv4).
>
> Anyone who knows if this is somehow possible?
>