>  Doug, does your kernel have TCP_SIGNATURE option?  The patch[*] for
>  net/openbgpd can be used as a workaround if it was due to TCP_MD5SIG
>  option on the listening sockets.
> 
>  [*] http://people.allbsd.org/~hrs/FreeBSD/openbgpd.20120104-1.diff
> 
>  While this is an ugly hack and I will investigate more reasonable
>  solution for that, I want to narrow down the cause first.  Can anyone
>  who are using a 8-STABLE kenrel with TCP_SIGNATURE let me know if
>  this works or not?

8-STABLE on several servers, csup'ed only a couple of days ago, with 

options         TCP_SIGNATURE
options         IPSEC
device          crypto
device          cryptodev

and Quagga bgpd talking to Juniper M/MX routers using MD5 key on the
BGP sessions. No problems.

Steinar Haug, Nethelp consulting, sth...@nethelp.no
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"

Reply via email to