kern/147894: IPv6-in-IPv4 does not work inside an ESP-only IPsec tunnel

Alex alex323 at gmail.com
Sat Jun 19 00:40:03 UTC 2010


The following reply was made to PR kern/147894; it has been noted by GNATS.

From: Alex <alex323 at gmail.com>
To: bug-followup at FreeBSD.org
Cc:  
Subject: Re: kern/147894: IPv6-in-IPv4 does not work inside an ESP-only
 IPsec tunnel
Date: Fri, 18 Jun 2010 20:34:33 -0400

 The following error is printed when net.inet6.ipsec6.debug is set to 1:
 
 Jun 18 20:19:23 orion kernel: ipsec6_output_tunnel: family mismatched between inner and outer, spi=156253021
 Jun 18 20:19:23 orion kernel: [ip6_output:549] (ipsec): error code 47
 
 The relevant lines of code are:
 
 --- ipsec_output.c begins here ---
 if (isr->sav->sah->saidx.src.sa.sa_family != AF_INET6) {
                         ipseclog((LOG_ERR, "%s: family mismatched between " "inner and outer, spi=%u\n", __func__,
                             ntohl(isr->sav->spi)));
                         V_ipsec6stat.ips_out_inval++;
                         error = EAFNOSUPPORT;
                         goto bad;
                 }
 --- ipsec_output.c ends here ---
 
 I will be looking further in to this.


More information about the freebsd-bugs mailing list