Outstanding issues with ipsec under 5.2.1?

[Bjoern A. Zeeb]

On Sun, 9 May 2004, Jonathan Belson wrote:

> > I've just spent a few hours trying to set up a working ipsec tunnel
> > between a wireless laptop and my server.
>
> I found an e-mail from someone who was having a similar problem with
> 5.2-RELEASE
>
> http://docs.freebsd.org/cgi/getmsg.cgi?fetch=2858147+0+/usr/local/www/db/text/2004/freebsd-current/20040208.freebsd-current
>
> so it looks like the problem still exists.
>
> I've worked around it in the meantime by replacing 'require' with 'use'.

you need to do this for IKE traffic only; see

http://lists.freebsd.org/pipermail/freebsd-net/2004-March/003541.html
and
http://lists.freebsd.org/pipermail/freebsd-net/2004-March/003542.html


> Is the FAST_IPSEC option only for machines with crypto-hardware?

no.

-- 
Bjoern A. Zeeb				bzeeb at Zabbadoz dot NeT
56 69 73 69 74				http://www.zabbadoz.net/