Date: Wed, 1 Aug 2007 17:55:36 -0500 From: David DeSimone <fox@verio.net> To: freebsd-net@freebsd.org Subject: Re: IPSEC connection drops and doesn't recover Message-ID: <20070801225536.GB19913@verio.net> In-Reply-To: <7feb82f40708010504y75ab3cc9i4a31b41a765c0af4@mail.gmail.com> References: <7feb82f40707301752j2ccb235eof197fed852188bd5@mail.gmail.com> <20070731105332.GA1285@jayce.zen.inc> <7feb82f40707311129n66c149c0k6f106acd6e7b8d5@mail.gmail.com> <7feb82f40708010504y75ab3cc9i4a31b41a765c0af4@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Isaac Kohen <ik1024@gmail.com> wrote: > > I get these in dmesg-- does it mean anything? > > IPv4 ESP input: no key association found for spi 94246771 > IPv4 ESP input: no key association found for spi 94246771 > IPv4 ESP input: no key association found for spi 94246771 > IPv4 ESP input: no key association found for spi 94246771 This means that your remote peer still believes that there is an outstanding SA defined, and it is sending you encrypted packets that your system does not understand. As another poster reported, you may have some IKE session lifetime discrepancies that you need to work out. - -- David DeSimone == Network Admin == fox@verio.net "It took me fifteen years to discover that I had no talent for writing, but I couldn't give it up because by that time I was too famous. -- Robert Benchley -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFGsQ9oFSrKRjX5eCoRAqQfAJ4smgTABPRS78VuYqijWYK66msQ0ACfdqss GUoaysrFP0ymHGz1UyvXiX4= =u/uk -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20070801225536.GB19913>