From owner-freebsd-net@FreeBSD.ORG Fri Dec 11 22:02:17 2009 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 22E93106566C for ; Fri, 11 Dec 2009 22:02:17 +0000 (UTC) (envelope-from mike@sentex.net) Received: from lava.sentex.ca (pyroxene.sentex.ca [199.212.134.18]) by mx1.freebsd.org (Postfix) with ESMTP id E37608FC17 for ; Fri, 11 Dec 2009 22:02:16 +0000 (UTC) Received: from mdt-xp.sentex.net (simeon.sentex.ca [192.168.43.27]) by lava.sentex.ca (8.14.3/8.14.3) with ESMTP id nBBM2Fli073479; Fri, 11 Dec 2009 17:02:15 -0500 (EST) (envelope-from mike@sentex.net) Message-Id: <200912112202.nBBM2Fli073479@lava.sentex.ca> X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9 Date: Fri, 11 Dec 2009 17:02:20 -0500 To: Jon Otterholm , From: Mike Tancsa In-Reply-To: References: <200912111923.nBBJNLk3072715@lava.sentex.ca> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed Cc: Subject: Re: Racoon site-to site X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 11 Dec 2009 22:02:17 -0000 At 04:43 PM 12/11/2009, Jon Otterholm wrote: > > Also, what does > > sysctl net.key.preferred_oldsa > > > > show ? > >It has not jamed up yet but here is output from sysctl: > >net.key.preferred_oldsa: 1 > >Would it help setting it to 0 to force renewal of keys at reconnection? I think it should allow your end to honor the other side's new SA should it want one ahead of schedule ---Mike -------------------------------------------------------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, mike@sentex.net Providing Internet since 1994 www.sentex.net Cambridge, Ontario Canada www.sentex.net/mike