+ipsec_common_input: no key association found for SA

[Bjoern A. Zeeb]

On Mon, 29 Dec 2008, Gabe wrote:

> This is what setkey -Da returns:
> box# setkey -Da
> Invalid extension type
> Invalid extension type
> box#

you are running with the NAT-T patch (as I see you say further down).
Try /usr/local/sbin/setkey -Da in that case.


-- 
Bjoern A. Zeeb                      The greatest risk is not taking one.