FAST_IPSEC/racoon vs CISCO PIX anyone?

[Bob Bishop]

Hi,

Problems interworking this combination, with ESP tunnel. SA gets negotiated OK, but ESP packets get rejected by the PIX: it says "host not found a.b.c.d" where a.b.c.d is its own endpoint address, and sends "invalid SPI" back to our end, even thought the SPI on the rejected ESP packet is the one just negitiated.

This is RC2, racoon-20021120a. FWIW the same problem occurs on 4.7 with 'ordinary' IPSEC too.

Any suggestions? TIA

--
Bob Bishop +44 (0)118 977 4017
[EMAIL PROTECTED] fax +44 (0)118 989 4254


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message