Date: Mon, 26 Jun 2006 01:30:10 -0500 From: David DeSimone <fox@verio.net> To: freebsd-net@freebsd.org Subject: Re: VPN with FAST_IPSEC and ipsec tools Message-ID: <20060626063010.GB25367@verio.net> In-Reply-To: <20060626040939.GA25367@verio.net> References: <449228FA.50303@thebeastie.org> <20060616122855.GA29279@uk.tiscali.com> <20060616154306.GA18578@verio.net> <449B5D50.8000700@thebeastie.org> <20060623062221.GA23272@verio.net> <449F52AA.8080504@thebeastie.org> <20060626040939.GA25367@verio.net>
next in thread | previous in thread | raw e-mail | index | archive | help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
David DeSimone <fox@verio.net> wrote:
>
> Hmm... In examining my kernel configuration I found these options:
>
> options IPSEC
> options IPSEC_ESP
> options IPSEC_DEBUG
> # options IPSEC_FILTERGIF
> # options FAST_IPSEC
>
> So it appears that I am NOT using FAST_IPSEC.
I have now recompiled my kernel with the following options:
# options IPSEC
# options IPSEC_ESP
# options IPSEC_DEBUG
# options IPSEC_FILTERGIF
options FAST_IPSEC
device crypto
After rebooting, I noticed the startup messages show I am indeed using
FAST_IPSEC.
My other configuration remains unchanged. I can still establish and use
the tunnels I have set up, so I don't believe this is an IPSEC vs
FAST_IPSEC problem you're seeing.
- --
David DeSimone == Network Admin == fox@verio.net
"It took me fifteen years to discover that I had no
talent for writing, but I couldn't give it up because
by that time I was too famous. -- Robert Benchley
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
iD8DBQFEn37yFSrKRjX5eCoRAni6AJ9bZX9VsOaO45gDrkxBO/HJHY+MLACeKkSb
c7Uyt68UUQpJmezJlaUwI1A=
=c/nK
-----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060626063010.GB25367>