From owner-freebsd-net@FreeBSD.ORG Mon Jun 26 06:30:21 2006 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id ABC8316A40B for ; Mon, 26 Jun 2006 06:30:21 +0000 (UTC) (envelope-from fox@verio.net) Received: from dfw-smtpout4.email.verio.net (dfw-smtpout4.email.verio.net [129.250.36.44]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4A98943D5C for ; Mon, 26 Jun 2006 06:30:21 +0000 (GMT) (envelope-from fox@verio.net) Received: from [129.250.36.61] (helo=dfw-mmp1.email.verio.net) by dfw-smtpout4.email.verio.net with esmtp id 1Fukc0-00002P-BZ for freebsd-net@freebsd.org; Mon, 26 Jun 2006 06:30:20 +0000 Received: from [129.250.40.241] (helo=limbo.int.dllstx01.us.it.verio.net) by dfw-mmp1.email.verio.net with esmtp id 1Fukc0-0001HF-8G for freebsd-net@freebsd.org; Mon, 26 Jun 2006 06:30:20 +0000 Received: by limbo.int.dllstx01.us.it.verio.net (Postfix, from userid 1000) id CDB0F8E2CC; Mon, 26 Jun 2006 01:30:10 -0500 (CDT) Date: Mon, 26 Jun 2006 01:30:10 -0500 From: David DeSimone To: freebsd-net@freebsd.org Message-ID: <20060626063010.GB25367@verio.net> Mail-Followup-To: freebsd-net@freebsd.org References: <449228FA.50303@thebeastie.org> <20060616122855.GA29279@uk.tiscali.com> <20060616154306.GA18578@verio.net> <449B5D50.8000700@thebeastie.org> <20060623062221.GA23272@verio.net> <449F52AA.8080504@thebeastie.org> <20060626040939.GA25367@verio.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; x-action=pgp-signed Content-Disposition: inline In-Reply-To: <20060626040939.GA25367@verio.net> Precedence: bulk User-Agent: Mutt/1.5.9i Subject: Re: VPN with FAST_IPSEC and ipsec tools X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Jun 2006 06:30:21 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 David DeSimone wrote: > > Hmm... In examining my kernel configuration I found these options: > > options IPSEC > options IPSEC_ESP > options IPSEC_DEBUG > # options IPSEC_FILTERGIF > # options FAST_IPSEC > > So it appears that I am NOT using FAST_IPSEC. I have now recompiled my kernel with the following options: # options IPSEC # options IPSEC_ESP # options IPSEC_DEBUG # options IPSEC_FILTERGIF options FAST_IPSEC device crypto After rebooting, I noticed the startup messages show I am indeed using FAST_IPSEC. My other configuration remains unchanged. I can still establish and use the tunnels I have set up, so I don't believe this is an IPSEC vs FAST_IPSEC problem you're seeing. - -- David DeSimone == Network Admin == fox@verio.net "It took me fifteen years to discover that I had no talent for writing, but I couldn't give it up because by that time I was too famous. -- Robert Benchley -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFEn37yFSrKRjX5eCoRAni6AJ9bZX9VsOaO45gDrkxBO/HJHY+MLACeKkSb c7Uyt68UUQpJmezJlaUwI1A= =c/nK -----END PGP SIGNATURE-----