Date: Tue, 19 Feb 2002 10:55:28 -0800 From: Lars Eggert <larse@ISI.EDU> To: Archie Cobbs <archie@dellroad.org> Cc: Justin Hawkins <justin@hawkins.dropbear.id.au>, freebsd-net@FreeBSD.ORG Subject: Re: mpd-netgraph as VPN client to Cisco 2500 Message-ID: <3C729FA0.9060700@isi.edu> References: <200202191825.g1JIP4O96413@arch20m.dellroad.org>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] Archie, Archie Cobbs wrote: > Newer versions of mpd will not even finish negotiation with a box > that uses the same IP address inside & out... this was added as a > safety check.. to disable this behavior and allow such negotiation, > apply the patch below. you put created that patch in repsonse to my email back then about the encapsulation loop :-) (and it works great in preventing the kernel panic). The problem with the Cisco we have here is that even when it gets a NAK during negotiation (when offering its IP address to mpd), it will stupidly retry with the same address over and over, until negotiation fails. Justin doesn't seem to have this problem; in the log he posted, his Cisco box gives him a valid IP address after the NAK. That's why I'm interested in how he made it do that. If I take out the NAK patch, I believe I'll see kernel panics again; or were you saying that adding a host route can prevent this? Thanks, Lars -- Lars Eggert <larse@isi.edu> Information Sciences Institute http://www.isi.edu/larse/ University of Southern California [-- Attachment #2 --] 0 *H 01 0 + 0 *H 00 G0 *H 01 0 UZA10U Western Cape10U Cape Town10 U Thawte1 0U Certificate Services1(0&U Personal Freemail RSA 2000.8.300 010824164000Z 020824164000Z0T10 UEggert1 0 U*Lars10U Lars Eggert1 0 *H larse@isi.edu00 *H 0 |\Pw v~~ FDooӦA\- Cˀ4.)&{肋 ,z (ܷر߈T7_'txGH^tt/ҹB8%t<#ֲN V0T0*+e!0 00L2uMyffBNUbNJJcdZ2s0U 0 larse@isi.edu0 U 0 0 *H aJPMՒ ]cѭC+kS+wZ1gY",YT41 j 6:~℩ D~Kؚl=u(ՎM?cF7@}T00 G0 *H 01 0 UZA10U Western Cape10U Cape Town10 U Thawte1 0U Certificate Services1(0&U Personal Freemail RSA 2000.8.300 010824164000Z 020824164000Z0T10 UEggert1 0 U*Lars10U Lars Eggert1 0 *H larse@isi.edu00 *H 0 |\Pw v~~ FDooӦA\- Cˀ4.)&{肋 ,z (ܷر߈T7_'txGH^tt/ҹB8%t<#ֲN V0T0*+e!0 00L2uMyffBNUbNJJcdZ2s0U 0 larse@isi.edu0 U 0 0 *H aJPMՒ ]cѭC+kS+wZ1gY",YT41 j 6:~℩ D~Kؚl=u(ՎM?cF7@}T0)0 0 *H 01 0 UZA10U Western Cape10U Cape Town10U Thawte Consulting1(0&U Certification Services Division1$0"UThawte Personal Freemail CA1+0) *H personal-freemail@thawte.com0 000830000000Z 020829235959Z01 0 UZA10U Western Cape10U Cape Town10 U Thawte1 0U Certificate Services1(0&U Personal Freemail RSA 2000.8.3000 *H 0 32c %E>nx'gڈD)c5*mp<ܮto034qmOe KaU5u'rװ |CBPQ<9TIf - ki N0L0)U "0 0 10UPrivateLabel1-2970U 0 0 U 0 *H so&e4KYbDI j&*b ct mSK8P:l4撜n# KrgPo.X PW Ո9[9}4%MjÑ/<RbH10001 0 UZA10U Western Cape10U Cape Town10 U Thawte1 0U Certificate Services1(0&U Personal Freemail RSA 2000.8.30G0 + a0 *H 1 *H 0 *H 1 020219185528Z0# *H 10++`;`ā]yh\Z0R *H 1E0C0 *H 0*H 0 *H @0+0 *H (0 *H 101 0 UZA10U Western Cape10U Cape Town10 U Thawte1 0U Certificate Services1(0&U Personal Freemail RSA 2000.8.30G0 *H DlW n'}HHc ' F2Ot1 &'&М+J+韥0< x]Wx0zI$ed 7zd pôWx[help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3C729FA0.9060700>