(usagi-users 02253) Re: IPSEC over ipv4 examples

[Kazunori Miyazawa <kazunori@xxxxxxxxxxxx>]

Thank you for using.

On Thu, 06 Mar 2003 14:34:31 -0500
David T Hollis <dhollis@xxxxxxxxxxxxxx> wrote:

> Does anyone have any good examples of setting up a USAGI 2.4.20 kernel 
> to perform IPSEC over ipv4 (no ipv6 at all)?  All of the examples I've 
> seen have been traversing ipv6 connections and throwing ipv4 along with 
> it and in trying to hack them around to work for my needs, it's no dice. 
>   I am trying to setup a site-to-site tunnel (both sides are USAGI 
> 2.4.20, 2/14 release).  The problem that I am running into is that I can 
> establish the IPIP tunnel and things are fine and tcpdump shows the 
> traffic is not encrypted.  I can establish the IPSEC SA (IKE or manual) 
> and everyone is happy but I can not route to the other side.  If I try 
> to make the tunnel device the gateway, traffic goes but doesn't encrypt. 
>   It seems that in connecting the tunnel to the IPSEC connection is 
> where my problem is at.  But I can't tell.   Any pointers would really 
> be appreciated.
> 

Sorry I have not so much expreience of IPsec operation on IPv4 with USAGI.
There is a known bug in USAGI IPsec which is decrypt and remove
the information before throwing packet up to raw socket.

Please tap on the encrypted link with using aunother host and hub which isn't switch.
When you will do that and the packet will be not encrypted, please notice.

Best regards,

--Kazunori Miyazawa (Yokogawa Electric Corporation)