https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=223835
--- Comment #3 from Andrey V. Elsukov <a...@freebsd.org> --- (In reply to Alexey from comment #2) > flush; > add 185.1.62.241 185.1.62.69 tcp 0x1000 -A tcp-md5 "some_password"; > add 185.1.62.69 185.1.62.241 tcp 0x1001 -A tcp-md5 "some_password"; > > I also do this /etc/rc.d/ipsec reload > > [root@gate /home/pautina]# setkey -D > 185.1.62.69 185.1.62.241 > tcp mode=any spi=4097(0x00001001) reqid=0(0x00000000) > A: tcp-md5 6a757472 616e3764 45625577 72366339 > allocated: 0 hard: 0 soft: 0 > sadb_seq=1 pid=55761 refcnt=1 > 185.1.62.241 185.1.62.69 > tcp mode=any spi=4096(0x00001000) reqid=0(0x00000000) > A: tcp-md5 6a757472 616e3764 45625577 72366339 > allocated: 0 hard: 0 soft: 0 > sadb_seq=0 pid=55761 refcnt=1 > But BGP session state at Connect. It seems SAs are not matched by any packets. Check what addresses uses daemon and also check what shows `netstat -sp tcp | grep sig` -- You are receiving this mail because: You are the assignee for the bug. _______________________________________________ freebsd-bugs@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/freebsd-bugs To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"
