Where is IPSec NAT-T support?

VANHULLEBUS Yvan vanhu_bsd at zeninc.net
Thu Sep 14 23:39:27 PDT 2006


On Fri, Sep 15, 2006 at 06:02:38AM +0600, Kamanashis Roy Shuva wrote:
> Hi,
>  You have done a great jop. And I find this useful today. Problem is things
> are not working fine.
>  I have compiled freebsd with the patch
> MD5 (freebsd6-natt.diff) = 81d535363981b5e84be77cbf26918ccc
> for natt support. But I have problems both before and after compilation.
> Note, as I tried uname I find
> -------------------------------------
> localhost# uname -v
> FreeBSD 6.0-RELEASE #7: Thu Sep 14 19:28:39 GMT 2006     tapan at localhost
> :/usr/obj/usr/src/sys/IPSEC
> -------------------------------------
> Again I  have the following line in my conf file for kernel
> -------------------------------------
> options         IPSEC
> options         IPSEC_ESP
> options         IPSEC_DEBUG
> options         IPSEC_NAT_T
> -------------------------------------
> and I have not compiled with fast ipsec support
> But there were two problems.
>  1. I cannot compile the ipsec-tools with '--enable-natt=yes'. It checks
> the presence of
> natt support and it fals to find that. There in configure file I find a c
> program

Guess you didn't "make buildworld && make installworld", so you still
have the non patched version of net/pfkeyv2.h in /usr/src.



[....]
> --------------------------------------
>  2. the patch failed for src/sys/netkey/key.c
> and I have tried to do this manually ,

??????

Could you give us the .rej ?



Yvan.

-- 
NETASQ
http://www.netasq.com


More information about the freebsd-net mailing list