IPSec + Packet loss and ipsec_common_input error
nrml nrml
nrml at att.net
Fri Dec 26 11:08:44 UTC 2008
All,
So I've got IPSec installed and configured and I can communicate across the tunnel just fine but I got some pretty bad packet loss:
I've got server1 connected to server2 in another building via a T1 circuit.
This is from server1 to a sever behind server2:
--- 192.168.20.x ping statistics ---
10 packets transmitted, 6 packets received, 40.0% packet loss
round-trip min/avg/max/stddev = 253.545/263.815/270.700/5.500 ms
This is from server2 to a machine behind server1
--- 192.168.10.x ping statistics ---
10 packets transmitted, 6 packets received, 40.0% packet loss
round-trip min/avg/max/stddev = 258.654/272.065/286.893/8.608 ms
And on top of that I've got these messags on both server1 and server2 but most of them are on server1 for some reason:
ipsec_common_input: no key association found for SA
ipsec_common_input: no key association found for SA
ipsec_common_input: no key association found for SA
ipsec_common_input: no key association found for SA
ipsec_common_input: no key association found for SA
ipsec_common_input: no key association found for SA
Anyone have any clues? At this point I'm thinking its either just the connection is just bogged down or.. I'm not sure.
Thanks
/gabe
More information about the freebsd-net
mailing list