Re: FAST_IPSEC doesn't seem to honor net.key.prefered_oldsa=0

2003-09-11 Thread Sam Leffler
Thanks. This was a change that came into the KAME code after I'd branched. I need to diff all of the KAME code since that time and merge the relevant bug fixes. Sam ___ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd

RE: FAST_IPSEC doesn't seem to honor net.key.prefered_oldsa=0

2003-09-11 Thread Oldach, Helge
Gabor, thank you, this is exactly what I observe as well. I wish to add that commercial IPSec equipment appears to prefer net.key.prefered_oldsa=0 which makes FAST_IPSEC (defaulting to "1") slightly incompatible. This applies to Cisco IPSec gear in particular. Regards, Helge > -Original Me