Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 26 Dec 2008 02:42:01 -0800 (PST)
From:      nrml nrml <nrml@att.net>
To:        freebsd-net@freebsd.org
Subject:   IPSec + Packet loss and ipsec_common_input error
Message-ID:  <960173.98196.qm@web83807.mail.sp1.yahoo.com>

next in thread | raw e-mail | index | archive | help
All,

So I've got IPSec installed and configured and I can communicate across the tunnel just fine but I got some pretty bad packet loss:

I've got server1 connected to server2 in another building via a T1 circuit.

This is from server1 to a sever behind server2:

--- 192.168.20.x ping statistics ---
10 packets transmitted, 6 packets received, 40.0% packet loss
round-trip min/avg/max/stddev = 253.545/263.815/270.700/5.500 ms

This is from server2 to a machine behind server1

--- 192.168.10.x ping statistics ---
10 packets transmitted, 6 packets received, 40.0% packet loss
round-trip min/avg/max/stddev = 258.654/272.065/286.893/8.608 ms

And on top of that I've got these messags on both server1 and server2 but most of them are on server1 for some reason:

ipsec_common_input: no key association found for SA
ipsec_common_input: no key association found for SA 
ipsec_common_input: no key association found for SA 
ipsec_common_input: no key association found for SA 
ipsec_common_input: no key association found for SA 
ipsec_common_input: no key association found for SA 

Anyone have any clues? At this point I'm thinking its either just the connection is just bogged down or.. I'm not sure.

Thanks

/gabe



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?960173.98196.qm>