Re: IKE Phase-II fails - GETSPI: Operation not supported

2006-09-06 Thread Hans-Joerg Hoexer
please provide all information. On Tue, Sep 05, 2006 at 02:50:12PM -0400, John Ruff wrote: I'm trying implement a IPSec/VPN tunnel and phase-II of the IKE negotiation is failing with the following errors seen from 'isakmpd - dKL -D A=90': 110340.763012 Default pf_key_v2_get_spi: GETSPI:

IKE Phase-II fails - GETSPI: Operation not supported

2006-09-05 Thread John Ruff
I'm trying implement a IPSec/VPN tunnel and phase-II of the IKE negotiation is failing with the following errors seen from 'isakmpd - dKL -D A=90': 110340.763012 Default pf_key_v2_get_spi: GETSPI: Operation not supported 110340.763362 Default initiator_send_HASH_SA_NONCE: doi-get_spi failed

IKE Phase-II fails - GETSPI: Operation not supported

2006-09-05 Thread John Ruff
***Please ignore previous post. Forgive me for not googling first. Answer: # sysctl net.inet.esp.enable=1 [previous post] I'm trying implement a IPSec/VPN tunnel and phase-II of the IKE negotiation is failing with the following errors seen from 'isakmpd - dKL -D A=90': 110340.763012