Hello all, First -- I've read the FAQ and searched Sunsolve. I've tweaked lwp_default_stksize and friends and that fixed the initial kernel stack problems that developed. The configuration *does* work, for a time -- but eventually the machine falls over.
Background: I have two machines which are sun4u and ipsec tunnel endpoints. They both need 2 default routes. I found a post by Casper Dik which allows you to force packets out the right interface (to prevent Solaris from using round-robin out the interfaces). Using just IPsec tunneling alone works. Using ipf with just IPsec or with an IPsec-encrypted tunnel results in a kernel stack panic: panic: ptl1 trap reason 0x2 panicsys(104236b0,1040c278,104082a8,78002000,0,f) + 44 vpanic(104082a8,1040c278,31,0,2a1,30000f41d70) + cc panic(104082a8,2,0,0,0,2a382c0) + 1c sys_tl1_panic(5f029f61b8,2a100041fc8,0,120,0,0) + 8 fr_qout(1,78037868,20,102eb154,0,3000110db18) + 400 One dump had fr_precheck() at the start, while another had fr_check(). Sun support says ipf is grabbing too much stack. I have tried cranking lwp_default_stksize incrementally all the way up to 256k, I've tried setting red_minavail to 7000 and nothing works. In fact, raising those values seem to make matters worse once you go above 64k... ISCDA output available on request... Google seems to show that most queries related to these problems are never answered, I hope this is an exception... This particular trace came from ipf 3.4.30 although 3.4.20 was tested prior to that and the trace was similar. One box had kernel 108528-17 while the other had 108528-18. Upgrading both to -19 did not remedy the situation. I can't find any other related patches on sunsolve. Someone mentioned similar problems with Solaris 9 and patch 112233 resolves it there; is there a counterpart for Solaris 8 to fix this, or is it really an ipf issue? Thanks much in advance for any help or pointers. -- __________________________________________________________ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup
