From owner-freebsd-questions Fri Jul 5 19:32:24 2002 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.FreeBSD.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 74D3C37B400 for ; Fri, 5 Jul 2002 19:32:22 -0700 (PDT) Received: from fep1.cogeco.net (smtp.cogeco.net [216.221.81.25]) by mx1.FreeBSD.org (Postfix) with ESMTP id 05FF843E31 for ; Fri, 5 Jul 2002 19:32:22 -0700 (PDT) (envelope-from dlavigne6@cogeco.ca) Received: from d226-33-213.home.cgocable.net (d226-33-213.home.cgocable.net [24.226.33.213]) by fep1.cogeco.net (Postfix) with ESMTP id 87C04104ED for ; Fri, 5 Jul 2002 22:32:20 -0400 (EDT) Date: Fri, 5 Jul 2002 22:36:44 -0400 (EDT) From: Dru X-X-Sender: dlavigne6@x1-6-00-80-c8-3a-b8-46.kico2.on.cogeco.ca To: questions@freebsd.org Subject: setkey and lzs compression Message-ID: <20020705222150.P253-100000@x1-6-00-80-c8-3a-b8-46.kico2.on.cogeco.ca> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi guys, Anyone know the proper syntax for specifying lzs as the compression algorithm with setkey? My understanding of the manpage is obviously flawed and I haven't been able to find a working example on the Net. I've tried these variations with no luck: add first_ip second_ip ipcomp -C lzs; spdadd first_ip second_ip any -P out ipsec -C calgo lzs esp/tunnel/first_ip-second_ip/require; spdadd first_ip second_ip any -P out ipsec ipcomp/esp/tunnel/first_ip-second_ip/require; I'm trying to negotiate with a PIX which only understands lzs, not the default deflate. Since I've tried to configure lzs, I keep getting an empty SPD so my syntax must be incorrect. Any help appreciated. Dru To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message