The FreeBSD Diary

The FreeBSD Diary (TM)

Providing practical examples since 1998

If you buy from Amazon USA, please support us by using this link.
 New Topic  |  Go to Top  |  Go to Topic  |  Search  |  Log In   Newer Topic  |  Older Topic 
 ping6 with IPSEC policy
Author: Kamaraj 
Date:   28-02-02 09:52

1) In our FreeBSD machines, kernel is compiled with
IPSEC options (IPSEC, IPSEC_ESP, IPSEC_DEBUG) . While trying ping6
using the configured
policy (using: ping6 -P <policyname> <destaddr>), the message
"unable to set IPSEC policy" is coming. Any soulution for this?


consider the following setup (All are FreeBSD machines):


Policies (AH, Tunnelmode, hmac-md)are configured successfully in
R1 and R3.
When Ping6 is initiated from H1 to H2, packets coming
from R1 do not contain AH header. But there is a reply
from H2 without AH header. How to make R1 to send
IP packets with Security headers.

Is there any options to be included in kernal??

Reply To This Message
 Re: ping6 with IPSEC policy
Author: Dan Langille 
Date:   28-02-02 18:00

Did you read the articles on this site about IPSEC?

Reply To This Message
 Re: ping6 with IPSEC policy
Author: Kamaraj 
Date:   04-03-02 07:19

yeah i have read and configured in kernal also ..

why is not encrypting ah header ??


Reply To This Message
 Re: ping6 with IPSEC policy
Author: Dan Langille 
Date:   04-03-02 11:59

This is not the place for help. Try the Support forum.

Reply To This Message
 Re: ping6 with IPSEC policy
Author: bhawani 
Date:   24-05-02 07:51

Hi All,

I also compiled and configured my kernel as mentioned in this document.
I am trying to ping the destination machine, machine A is able to send neighbor solicitation message to m/c B, but machine B is sending some ESP packet to m/c A. I guess m/c B should send neighbor advertisement message to m/c A.

Any help in this will be highly appreciated.


Reply To This Message
 Forum List  |  Threaded View   Newer Topic  |  Older Topic 

 User Login
 User Name:
 Remember my login:
 Forgot Your Password?
Enter your email address or user name below and a new password will be sent to the email address associated with your profile.
How to get the most out of the forum