Hi Peter,
I think the USAGI mailinglist is the best place to ask this question.
Please note that USAGI does not have something like KLIPS, their IPSec
implementation resides in the IPv6 stack.
When you write "IPsec doesn't seem to "intercept" packets sent between
the nodes", have you tested this with a third system that runs a
sniffer?
As I have not played with USAGI myself, I can not help you here, sorry.
Regards,
Gerhard
"Peter Löfkvist" wrote:
>
> Hey guys!
>
> I'm trying to get IPsec running under IPv6. I'm using the USAGI snapshot
> from 2002/05/27. Since USAGI's IPsec implementation is based on
> FreeS/Wan/IABG, I thought my question might be apropriate here. I configured
> the kernel as described in USAGI's doc/HOWTO/IPsec and installed the pfkey
> command when the kernel was finished compiling. I've noticed that I seem to
> be missing KLIPS module(/usr/local/src/usagi/src/freeswan/utils/_startklips.
> According to the the USAGI IPsec HOWTO, one should after installing the new
> (with IPsec support) compiled kernel, just issue the command:
>
> /usr/src/usagi/usagi/pfkey/pfkey -A sa -T ah -S 0x1234 -p udp -s
> 3ffe:200:15:42::1 -d 3ffe:200:15:42:200:86ff:fe1e:22a2 --auth hmac-md5
> --authkey 0x0123456789abcdef0123456789abcdef
>
> /usr/src/usagi/usagi/pfkey/pfkey -A sa -T ah -S 0x1234 -p udp -d
> 3ffe:200:15:42::1 -s 3ffe:200:15:42:200:86ff:fe1e:22a2 --auth hmac-md5
> --authkey 0x0123456789abcdef0123456789abcdef
>
> /usr/src/usagi/usagi/pfkey/pfkey -A sp -T ah -S 0x1234 -p udp -s
> 3ffe:200:15:42::1 -d 3ffe:200:15:42:200:86ff:fe1e:22a2
>
> /usr/src/usagi/usagi/pfkey/pfkey -A sp -T ah -S 0x1234 -p udp -d
> 3ffe:200:15:42::1 -s 3ffe:200:15:42:200:86ff:fe1e:22a2
>
> on both nodes. My problem here is that when I have done this, IPsec doesn't
> seem to "intercept" packets sent between the nodes. Have I missed something?
> Is there something extra I should compile and install even in USAGI?
>
> Thank you
> /Peter
>
> _________________________________________________________________
> Send and receive Hotmail on your mobile device: http://mobile.msn.com
>
> _______________________________________________
> Users mailing list
> Users_at_lists.freeswan.org
> http://lists.freeswan.org/mailman/listinfo/users
-- --------------------------------------------------- Gerhard GeßlerCommunication Networks, IABG mbH Einsteinstr. 20 85521 Ottobrunn, Germany
Telefon: +49 89 6088 - 2021 Fax: +49 89 6088 - 2845
E-Mail: gessler_at_iabg.de _______________________________________________ Users mailing list Users_at_lists.freeswan.org http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:20:19 CEST