(racoon 954) ipsec +IPv6 in freeBSD-6.1

------=_Part_277_20172898.1158817081797
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi friends,


ping6 is  working properly when the keys(which is in psk.txt) are same.
If I changed any one key aslo ,it is ping6ing ..

But this problem is not there when I am using with IPv4
Here is my  setkey  file
==========================================
spdadd -6 fe80::250:baff:fe8d:3866 fe80::2e0:4cff:fee7:dc61  icmp6 -P out
ipsec ah/transport//require;
spdadd -6 fe80::2e0:4cff:fee7:dc61 fe80::250:baff:fe8d:3866 icmp6 -P in
ipsec ah/transport//require;




Here is my racoon.conf
=================
path include "/usr/local/etc/racoon2";
path pre_shared_key "/usr/local/etc/racoon2/psk.txt";
log debug;

remote anonymous
{
exchange_mode main,aggressive;
my_identifier address;


proposal
{
encryption_algorithm 3des;
hash_algorithm sha1;
authentication_method pre_shared_key ;
dh_group 2 ;
}
proposal_check obey;
}

sainfo anonymous
{
pfs_group 2;
lifetime time 1 hour;
encryption_algorithm 3des,blowfish 448,rijndael;
authentication_algorithm hmac_sha1,hmac_md5;
compression_algorithm deflate ;
}
===============================

psk.txt
fe80::2e0:4cff:fee7:dc61 asdfghjklmnbvcxz
==============================


Is there any wrong in the racoon.conf?

It is working properly for IPv4 but not for IPv6.
New kernel is compiled with options IPSEC ,IPSEC_DEBUG and IPSEC_ESP.
And also I added
                                   ipsec_enable = "YES"
                                   racoon_enable = "YES"      in
/etc/rc.conf


Please give me the solution.

------=_Part_277_20172898.1158817081797
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hi friends,<br>
<br><br>ping6 is&nbsp; working properly when the keys(which is in psk.txt) are same.<br>If I changed any one key aslo ,it is ping6ing ..<br><br>But this problem is not there when I am using with IPv4 <br>Here is my&nbsp; setkey&nbsp; file
<br>========================================== <br>spdadd -6 fe80::250:baff:fe8d:3866 fe80::2e0:4cff:fee7:dc61&nbsp; icmp6 -P out ipsec ah/transport//require;<br>spdadd -6 fe80::2e0:4cff:fee7:dc61 fe80::250:baff:fe8d:3866 icmp6 -P in ipsec ah/transport//require;
<br><br><br><br><br>
Here is my <span class="highlight">racoon</span>.conf<br>
=================<br>
path include &quot;/usr/local/etc/racoon2&quot;;<br>
path pre_shared_key &quot;/usr/local/etc/racoon2/psk.txt&quot;;<br>
log debug;<br>
<br>
remote anonymous<br>
{<br>
    exchange_mode main,aggressive;<br>
    my_identifier address;<br>
<br>
<br>
    proposal<br>
    {<br>
          encryption_algorithm 3des;<br>
          hash_algorithm sha1;<br>
          authentication_method pre_shared_key ;<br>
          dh_group 2 ;<br>
     }<br>
    proposal_check obey;<br>
}<br>
<br>
sainfo anonymous<br>
{<br>
    pfs_group 2;<br>
    lifetime time 1 hour;<br>
    encryption_algorithm 3des,blowfish 448,rijndael;<br>
    authentication_algorithm hmac_sha1,hmac_md5;<br>
    compression_algorithm deflate ;<br>
}<br>
===============================<br>
<br>
psk.txt<br>
fe80::2e0:4cff:fee7:dc61 asdfghjklmnbvcxz<br>
==============================<br>
<br><br>
Is there any wrong in the <span class="highlight">racoon</span>.conf? <br>
<br>
It is working properly for IPv4 but not for IPv6. <br>
New kernel is compiled with options IPSEC ,IPSEC_DEBUG and IPSEC_ESP.<br>And also I added <br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ipsec_enable = &quot;YES&quot;<br>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; racoon_enable = &quot;YES&quot;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; in /etc/rc.conf
<br><br><br>
Please give me the solution.

------=_Part_277_20172898.1158817081797--