IPSec + Packet loss and ipsec_common_input error

nrml nrml nrml at att.net
Fri Dec 26 11:08:44 UTC 2008


All,

So I've got IPSec installed and configured and I can communicate across the tunnel just fine but I got some pretty bad packet loss:

I've got server1 connected to server2 in another building via a T1 circuit.

This is from server1 to a sever behind server2:

--- 192.168.20.x ping statistics ---
10 packets transmitted, 6 packets received, 40.0% packet loss
round-trip min/avg/max/stddev = 253.545/263.815/270.700/5.500 ms

This is from server2 to a machine behind server1

--- 192.168.10.x ping statistics ---
10 packets transmitted, 6 packets received, 40.0% packet loss
round-trip min/avg/max/stddev = 258.654/272.065/286.893/8.608 ms

And on top of that I've got these messags on both server1 and server2 but most of them are on server1 for some reason:

ipsec_common_input: no key association found for SA
ipsec_common_input: no key association found for SA 
ipsec_common_input: no key association found for SA 
ipsec_common_input: no key association found for SA 
ipsec_common_input: no key association found for SA 
ipsec_common_input: no key association found for SA 

Anyone have any clues? At this point I'm thinking its either just the connection is just bogged down or.. I'm not sure.

Thanks

/gabe


More information about the freebsd-net mailing list