Jim Stapleton wrote:

> What I found and added:
> #ipsec: Required for VPN
> options        IPSEC        #IP security
> options        IPSEC_ESP    #IP security (crypto; define w/ IPSEC)
> #ipsec optimsations
> options        FAST_IPSEC   # new IPsec (cannot define w/ IPSEC)
> options        IPSEC_FILTERGIF  #filter ipsec packets from a tunnel
> before adding these, I just had the default 6.1 generic kernel file
> with a few things commented and a couple uncommented.

Just start with the first two options, then add the others if needed.
But before you start, check if this actually solves the problem. There
is a well known problem with IPSec across NAT-firewalls: Authenticated
Headers don't work.

Not all kernel options are in the GENERIC file, look for the NOTES file,
platform specific NOTES are where you find the GENERIC for your
platform, but there is also a general NOTES.

Cheers, Erik
Ph: +34.666334818                      web: http://www.locolomo.org
X.509 Certificate: http://www.locolomo.org/crt/8D03551FFCE04F0C.crt
Key ID: 69:79:B8:2C:E3:8F:E7:BE:5D:C3:C3:B1:74:62:B8:3F:9F:1F:69:B9

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

Reply via email to