IPv6 readyNote: This archive passes through spamassassin. Every mail marked with the subject "*****SPAM*****" has exceed a certain threshold of spam-like behaviour.

[Users] cannot ping with FreeSWAN/IPv6

From: Sandrine.MASSON_at_fr.thalesgroup.com
Date: Wed Apr 24 2002 - 16:39:20 CEST


Hi all,

I installed the IPv6 version of FreeSWAN on two PCs connected to each other.
I configured an auto SA between both PCs in the ipsec.conf file. Then I
restarted FreeSWAN on both PCs. But I didn't up the SA.

Now I tried to ping6 and one PC answered by an Unreachable (Administratively
Prohibited) message. When I stop FreeSWAN on that PC I can ping6 in both
directions with no problem. So it seems the problem exists only on that PC
(its only difference is that it's a router while the other one is a end
host).

I setup the klips_debug option on it and got the messages : "Packet does not
match inbound ESP policies" and "Packet Dropped".

Can any one give me some clue about that problem? At least I'd love to know
why KLIPS seems to process the packets while no SA has been upped.

Thanks a lot,

Sandrine Masson
Thales communications
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users



This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:19:53 CEST