Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 14 Feb 2004 21:18:19 +0000
From:      Bruce M Simpson <bms@spc.org>
To:        Tobias Roth <roth@iam.unibe.ch>
Cc:        freebsd-current@freebsd.org
Subject:   Re: state of ipsec
Message-ID:  <20040214211819.GE11710@saboteur.dek.spc.org>
In-Reply-To: <20040214174144.GA13215@speedy.unibe.ch>
References:  <20040214174144.GA13215@speedy.unibe.ch>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Feb 14, 2004 at 06:41:44PM +0100, Tobias Roth wrote:
> I unsuccessfully tried to get ipsec and racoon working on 5.2-RELEASE-p2.
> Despite a setup that is proven to be correct, i don't see any outgoing
> packets whatsoever during phase1, which then results in a timeout.
> I know there have been issues with ipsec but i lost track of what got fixed
> for wich tag.

Have you tried using setkey -D to inspect the 'last used' timestamp present
on Security Associations?

Are you able to tcpdump ESP/AH traffic on both peers? Can you verify that
the path between both peers doesn't filter this traffic?

BMS



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040214211819.GE11710>