My xdm server produces IO errors when trying to run through an IPSec tunnel setup with ipsecctl and isakmpd:

XIO: fatal IO error 60 (Operation timed out) on X server "sony:0.0"
     after 10 requests (7 known processed) with 0 events remaining.

Setup:
X11 server <---(wireless-ipsec)---> AP/router <----> XDM server

10.0.9.98/27 - X11 server
10.0.9.97/27 - AP/router
10.0.9.33/27 - AP/router
10.0.9.35/27 - XDM server

IPSec is only negotiated between the X11 server and AP. The wireless cards used on the X11 server and AP are ral and are running OBSD-3.9-rel. The XDM server is FBSD-6.1-rel. The IPSec tunnel does work correctly with ftp, http, ssh, and ICMP traffic, just not X11.

ipsec.conf - X11 server:
ike esp from 10.0.9.98 to 10.0.9.35 peer 10.0.9.97
ike esp from 10.0.9.98 to 10.0.9.97

ipsec.conf - AP:
ike passive esp from 10.0.9.98 to 10.0.9.35 peer 10.0.9.98
ike passive esp from 10.0.9.97 to 10.0.9.98

If I tear down the tunnel, the X11 stuff works fine, albeit unsecured. Any suggestions will be appreciated.

-pachl

Reply via email to