netdev
[Top] [All Lists]

Compatibility problems IPsec 2.5.70 against FreeS/WAN 1.99

To: "Maillist netdev" <netdev@xxxxxxxxxxx>
Subject: Compatibility problems IPsec 2.5.70 against FreeS/WAN 1.99
From: "Dr. Peter Bieringer " <pb@xxxxxxxxxxxx>
Date: Wed, 04 Jun 2003 16:53:50 +0200
Cc: "Maillist USAGI-users" <usagi-users@xxxxxxxxxxxxxx>
Sender: netdev-bounce@xxxxxxxxxxx
Hi, has anyone successful examples of configuration settings for 2.5.70 IPsec (racoon/SAD/SPD) and FreeS/WAN? I got no success between 2 hosts, neither in tunnel nor in transport mode. (racoon and pluto config looks like ok, the IPsec-SA was proper established, also both hosts send packets with related spi). In transport mode, the comment of Andreas came true that in the ESP packet an IP-in-IP tunnel packet is transported (sent from the 2.5.70-ipsec host):
16:42:06.215546 [|ip]
0x0000   45                                             E
16:42:08.215348 [|ip]
0x0000 4500 0007 0004 40 E.....@ Looks like FreeS/WAN don't like this. In tunnel mode, ipsec0 interface of FreeS/WAN drops all received packages by the 2.5.70-ipsec host (seen in ifconfig stat). On 2.5.70-ipsec side I currently don't know how to debug, but I only see the ESP packet on the interface, nothing decrpyted. Very strange at all... Any hints available how to let FreeS/WAN communicate with 2.5.70-ipsec?
Thank you very much,
Peter
--
Dr. Peter Bieringer                     http://www.bieringer.de/pb/
GPG/PGP Key 0x958F422D               mailto: pb at bieringer dot de
Deep Space 6 Co-Founder and Core Member http://www.deepspace6.net/

<Prev in Thread] Current Thread [Next in Thread>
  • Compatibility problems IPsec 2.5.70 against FreeS/WAN 1.99, Dr. Peter Bieringer  <=