***Please ignore previous post. Forgive me for not googling first.
Answer: # sysctl net.inet.esp.enable=1
[previous post]
I'm trying implement a IPSec/VPN tunnel and phase-II of the IKE
negotiation is failing with the following errors seen from 'isakmpd -
dKL -D A=90':
110340.763012 Default pf_key_v2_get_spi: GETSPI: Operation not supported
110340.763362 Default initiator_send_HASH_SA_NONCE: doi->get_spi failed
110340.763933 Default exchange_run: doi->initiator (0x86aa2380) failed
This occurs after Phase-II proposals have been accepted. The other
peer is functioning fine, I have other tunnels to it from Cisco PIXs
and FreeBSD (raccon) boxes. Should this be reported as a bug?
I'm running:
4.0-current (GENERIC #1103) - x86
Thanks.