On 9/15/06, Larry Baird <[EMAIL PROTECTED]> wrote:
Just to be sure I understand the issue. You have a kernel built with the FAST_IPSEC NAT-T patches but without the IPSEC_NAT_T option. Your VPNs work but you are unable to dump your SAD entries.
No, I have it built with options IPSEC_NAT_T and FAST_IPSEC. builder# cat pfSense.6 | grep IPSEC options FAST_IPSEC options IPSEC_NAT_T IPSEC works correctly but setkey shows the error. # setkey -D Invalid extension type Invalid extension type Invalid extension type Invalid extension type Invalid extension type Invalid extension type Invalid extension type Invalid extension type Invalid extension type # Scott _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"
