Author: Kamaraj
Date: 28-02-02 09:52
1) In our FreeBSD machines, kernel is compiled with
IPSEC options (IPSEC, IPSEC_ESP, IPSEC_DEBUG) . While trying ping6
using the configured
policy (using: ping6 -P <policyname> <destaddr>), the message
"unable to set IPSEC policy" is coming. Any soulution for this?
2)
consider the following setup (All are FreeBSD machines):
H1<---->R1<----->R2<----->R3<------>H2
Policies (AH, Tunnelmode, hmac-md)are configured successfully in
R1 and R3.
When Ping6 is initiated from H1 to H2, packets coming
from R1 do not contain AH header. But there is a reply
from H2 without AH header. How to make R1 to send
IP packets with Security headers.
Is there any options to be included in kernal??
|
|
