Hello everybody,

Since 4.7 has been released, are there any changes in -current that
could affect ipsec?

here is my 1.2.3.4's ipsec.conf

ike  esp from 192.168.10.0/24 to 192.168.3.4/30 peer 5.6.7.8
ike  esp from 1.2.3.4 to 5.6.7.8

on 5.6.7.8:

ike passive esp from  192.168.3.4/30 to 192.168.10.0/24 peer 1.2.3.4
ike passive esp from 5.6.7.8 to 1.2.3.4

on 1.2.3.4 the system is 4.6-rel
on 5.6.7.8 the system is 4.7-current somewhere 1 week old
pf is disabled on both systems on the moment of test, so it doesn't
interfere.  

isakmpd  -DA=9 -K -p 3000 is running on both systems.

in tcpdump i am able to see traffic between the two isakmpd's.

ipsecctl -sa shows that no sa's got established...  




-- 
With best regards,
        Gregory Edigarov

Reply via email to