IPSec + Packet loss and ipsec_common_input error

[Gabe]

>-----Original Message-----
>From: nrml nrml <nrml at att.net>
>Sent: Friday, December 26, 2008 >2:42 AM
>To: freebsd-net at freebsd.org
>Subject: IPSec + Packet loss and 
>ipsec_common_input error
>
>All,
>
>So I've got IPSec installed and 
>configured and I can communicate >across the tunnel just fine but I got >some pretty bad packet loss:
>
>I've got server1 connected to 
>server2 in another building via a T1 circuit.
>
>This is from server1 to a sever 
>behind server2:

>--- 192.168.20.x ping statistics ---
>10 packets transmitted, 6 packets >received, 40.0% packet loss
>round-trip min/avg/max/stddev = >253.545/263.815/270.700/5.500 
>ms

>This is from server2 to a machine >behind server1

>--- 192.168.10.x ping statistics ---
>10 packets transmitted, 6 packets >received, 40.0% packet loss
>round-trip min/avg/max/stddev = >258.654/272.065/286.893/8.608 
>ms

>And on top of that I've got these 
>messags on both server1 and 
>server2 but most of them are on 
>server1 for some reason:

>ipsec_common_input: no key 
>association found for SA
>ipsec_common_input: no key association found for SA 
>ipsec_common_input: no key association found for SA 
>ipsec_common_input: no key association found for SA 
>ipsec_common_input: no key association found for SA 
>ipsec_common_input: no key association found for SA 

>Anyone have any clues? At this 
>point I'm thinking its either just the >connection is just bogged down or. >I'm not sure.

>Thanks

>/gabe
_______________________________________________
freebsd-net at freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"
----------------------------------------------------------

Okay I figured out the packet loss issue but I still don't know the cause of those messages.

thanks