(usagi-users 02155) Re: Question about IPsecv6

["Fan, Ardelle" <ardelle.fan@xxxxxxxxx>]

I have figured out the issue. The reason is I haven't configure the
IPSEC_ICMP.. in kernel config. So the target can handle income IPSec ping,
but cannot send out IPSec ping packet.
Thanks

-----Original Message-----
From: Mitsuru KANDA / ノ？・ウ [mailto:mk@xxxxxxxxxxxxxx]
Sent: 2003年1月28日 20:29
To: 'usagi-users@xxxxxxxxxxxxxx'
Subject: (usagi-users 02148) Re: Question about IPsecv6



At Wed, 22 Jan 2003 09:36:01 +0800,
Fan, Ardelle <ardelle.fan@xxxxxxxxx> wrote:
...
> We are now porting the usagi IPv6 and IPsecv6 to XScale platform and
testing
What version(stable version or snapshot release date) are you porting?

> it with TAHI test cases. We encountered a strange problem when we test the
> IPsecv6. Nearly all the *In* test Passed, but *Out*  case FAIL. 
> I attach two test running log file here.
> file a is result of running HTR_E_Out_3descbc.seq
> file b is result of running HTR_E_In_3descbc.seq
> These two test cases configure pfkey mostly the same, only exchange the
src,
> dst addr, and the direction is in or out. But results are totally
different.
> Now in ipsec dir, 37 cases (all are *In*.seq) can pass testing.
First of all, can your ipsec porting(on XScale) talk ipsec 
with other ipsec implementations?

> BTW, why pfkey always return errcode? Even "pfkey -L" will return -1. Is
> that still in development?
Instead of 'pfkey -L', please use 'ipsec-conf show'.

Regards,
-mk