jason@jw:~$ grep "IPSEC" /sys/conf/NOTES # In order to enable IPSEC you MUST also add device crypto to options IPSEC #IP security (requires device crypto) #options IPSEC_DEBUG #debug for IP security # Set IPSEC_FILTERTUNNEL to change the default of the sysctl to force packets # IPSEC history is preserved for such packets, and can be filtered #options IPSEC_FILTERTUNNEL #filter ipsec packets from a tunnel # Set IPSEC_NAT_T to enable NAT-Traversal support. This enables options IPSEC_NAT_T #NAT-T support, UDP encap of ESP # TCP sessions (e.g. BGP) where IPSEC is not available nor desirable. # This requires the use of 'device crypto', 'options IPSEC' # configuring IPSEC and when you have a h/w crypto device to accelerate
Может быть, поэтому?
