From owner-freebsd-net@FreeBSD.ORG  Mon Jun 26 06:30:21 2006
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id ABC8316A40B
	for <freebsd-net@freebsd.org>; Mon, 26 Jun 2006 06:30:21 +0000 (UTC)
	(envelope-from fox@verio.net)
Received: from dfw-smtpout4.email.verio.net (dfw-smtpout4.email.verio.net
	[129.250.36.44])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4A98943D5C
	for <freebsd-net@freebsd.org>; Mon, 26 Jun 2006 06:30:21 +0000 (GMT)
	(envelope-from fox@verio.net)
Received: from [129.250.36.61] (helo=dfw-mmp1.email.verio.net)
	by dfw-smtpout4.email.verio.net with esmtp id 1Fukc0-00002P-BZ
	for freebsd-net@freebsd.org; Mon, 26 Jun 2006 06:30:20 +0000
Received: from [129.250.40.241] (helo=limbo.int.dllstx01.us.it.verio.net)
	by dfw-mmp1.email.verio.net with esmtp id 1Fukc0-0001HF-8G
	for freebsd-net@freebsd.org; Mon, 26 Jun 2006 06:30:20 +0000
Received: by limbo.int.dllstx01.us.it.verio.net (Postfix, from userid 1000)
	id CDB0F8E2CC; Mon, 26 Jun 2006 01:30:10 -0500 (CDT)
Date: Mon, 26 Jun 2006 01:30:10 -0500
From: David DeSimone <fox@verio.net>
To: freebsd-net@freebsd.org
Message-ID: <20060626063010.GB25367@verio.net>
Mail-Followup-To: freebsd-net@freebsd.org
References: <449228FA.50303@thebeastie.org>
	<20060616122855.GA29279@uk.tiscali.com>
	<20060616154306.GA18578@verio.net>
	<449B5D50.8000700@thebeastie.org>
	<20060623062221.GA23272@verio.net>
	<449F52AA.8080504@thebeastie.org>
	<20060626040939.GA25367@verio.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii; x-action=pgp-signed
Content-Disposition: inline
In-Reply-To: <20060626040939.GA25367@verio.net>
Precedence: bulk
User-Agent: Mutt/1.5.9i
Subject: Re: VPN with FAST_IPSEC and ipsec tools
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 26 Jun 2006 06:30:21 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

David DeSimone <fox@verio.net> wrote:
>
> Hmm...  In examining my kernel configuration I found these options:
> 
>     options     IPSEC
>     options     IPSEC_ESP
>     options     IPSEC_DEBUG
>     # options   IPSEC_FILTERGIF
>     # options   FAST_IPSEC
> 
> So it appears that I am NOT using FAST_IPSEC.

I have now recompiled my kernel with the following options:

    # options       IPSEC
    # options       IPSEC_ESP
    # options       IPSEC_DEBUG
    # options       IPSEC_FILTERGIF
    options         FAST_IPSEC

    device          crypto

After rebooting, I noticed the startup messages show I am indeed using
FAST_IPSEC.

My other configuration remains unchanged.  I can still establish and use
the tunnels I have set up, so I don't believe this is an IPSEC vs
FAST_IPSEC problem you're seeing.

- -- 
David DeSimone == Network Admin == fox@verio.net
  "It took me fifteen years to discover that I had no
   talent for writing, but I couldn't give it up because
   by that time I was too famous.  -- Robert Benchley
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFEn37yFSrKRjX5eCoRAni6AJ9bZX9VsOaO45gDrkxBO/HJHY+MLACeKkSb
c7Uyt68UUQpJmezJlaUwI1A=
=c/nK
-----END PGP SIGNATURE-----