From owner-freebsd-current@FreeBSD.ORG  Sat Sep 11 23:43:31 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E3E8A16A4CE
	for <freebsd-current@freebsd.org>;
	Sat, 11 Sep 2004 23:43:31 +0000 (GMT)
Received: from zaphod.nitro.dk (port324.ds1-khk.adsl.cybercity.dk
	[212.242.113.79])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 4BF3D43D45
	for <freebsd-current@freebsd.org>;
	Sat, 11 Sep 2004 23:43:31 +0000 (GMT)
	(envelope-from simon@zaphod.nitro.dk)
Received: by zaphod.nitro.dk (Postfix, from userid 3000)
	id 0099511AB2; Sun, 12 Sep 2004 01:43:28 +0200 (CEST)
Date: Sun, 12 Sep 2004 01:43:28 +0200
From: "Simon L. Nielsen" <simon@FreeBSD.org>
To: "Georg-W. Koltermann" <gwk@rahn-koltermann.de>
Message-ID: <20040911234328.GC770@zaphod.nitro.dk>
References: <1094945709.15216.4.camel@localhost.muc.eu.mscsoftware.com>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="2oS5YaxWCcQjTEyO"
Content-Disposition: inline
In-Reply-To: <1094945709.15216.4.camel@localhost.muc.eu.mscsoftware.com>
User-Agent: Mutt/1.5.6i
cc: freebsd-current@freebsd.org
Subject: Re: [5.3-BETA3] no IPSEC connection to 5.2.1 box
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sat, 11 Sep 2004 23:43:32 -0000


--2oS5YaxWCcQjTEyO
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 2004.09.12 01:35:09 +0200, Georg-W. Koltermann wrote:

> I don't get my IPSEC connection to run. This system is 5.3-BETA3, the
> other system is 5.2.1.  Both use FAST_IPSEC.  Keys are negotiated by
> racoon.
>=20
> This system logs:
>=20
[...]
>         Sep 12 01:30:29 hunter racoon: INFO: isakmp.c:952:isakmp_ph2begin=
_i(): initiate new phase 2 negotiation: 10.0.0.3[0]<=3D>10.0.0.2[0]
>         Sep 12 01:30:29 hunter racoon: ERROR: pfkey.c:1076:pk_sendupdate(=
): libipsec failed send update (No buffer space available)

This is a known problem.  A workaround is to set
options MSIZE=3D512
in your kernel configuration file.

--=20
Simon L. Nielsen
FreeBSD Documentation Team

--2oS5YaxWCcQjTEyO
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)

iD8DBQFBQ42gh9pcDSc1mlERAn6rAJ4x6qX4TcGjWUt33bwdrfo9GKgi1ACfbyS2
8t9AgliVlP02J/58uQ51/7A=
=ATGw
-----END PGP SIGNATURE-----

--2oS5YaxWCcQjTEyO--