FreeBSD (Racoon) / Draytek Setup

[Helge Oldach]

Steve Greenshaw:
>################
>spdadd 192.168.32.0/24 192.168.1.0/24 ipencap -P out ipsec
>esp/tunnel/AAA.AAA.AAA.AAA-BBB.BBB.BBB.BBB/require;
>spdadd 192.168.1.0/24 192.168.32.0/24 ipencap -P in ipsec
>esp/tunnel/BBB.BBB.BBB.BBB-AAA.AAA.AAA.AAA/require;
>################

Try using "any" instead of "ipencap". (AFAIK gif(4) implements "ipip"
encapsulation ((protocol 94)) and not "ipip" ((protocol 4)). But this
is just meaningless here as the gif interface just acts as a routing
placeholder and doesn't actually transport traffic.)

The other thing you might want to try is using "unique" instead of
"require". This is necessary for ESP tunnel mode against Cisco boxes,
and probably will catch your case as well.

Maybe someone can explain the difference between these two? The manpage
isn't really verbose...

Regards,
Helge