OpenForum RSS: �� Racoon

�� Racoon (TaxucT)

Wed, 15 Feb 2012 11:12:59 GMT

��
��
cat /proc/sys/net/ipv4/ip_forward

�� Racoon (a2l)

Mon, 04 Apr 2011 08:10:43 GMT

> �� Racoon �� ... 8(
> ��
> ��
> 192.168.0.3 <=> 192.168.0.2

� ��

> �� /etc/racoon/setkey.conf
> flush;
> spdflush;
> spdadd 192.168.35.0/24 192.168.36.0/24 any -P out ipsec esp/tunnel 192.68.40.3-192.168.40.2/require;
> spdadd 192.168.36.0/24 192.168.35.0/24 any -P in ipsec esp/tunnel/192.68.40.2-192.168.40.3/require;

�� :
spdadd 192.168.35.0/24 192.168.36.0/24 any -P out ipsec esp/tunnel/192.68.0.3-192.168.0.2/require;
spdadd 192.168.36.0/24 192.168.35.0/24 any -P in ipsec esp/tunnel/192.68.0.2-192.168.0.3/require;

��, � � �� ip-ip-�� (�� ).��
�� ip-�� (�� ospf,
�� ), �� ipsec, �� (� ��
freebsd � g

�� Racoon (pavel_simple)

Sun, 03 Apr 2011 19:43:11 GMT

>[�� ]
> DEBUG: ignore because do not listen on source address : 192.68.40.3.
> DEBUG: pk_recv: retry[0] recv()
> DEBUG: get pfkey ACQUIRE message
> DEBUG: ignore because do not listen on source address : 192.68.40.3.
> DEBUG: pk_recv: retry[0] recv()
> DEBUG: get pfkey REGISTER message
> INFO: unsupported PF_KEY message REGISTER
> DEBUG: pk_recv: retry[0] recv()
> DEBUG: get pfkey FLUSH message
> ��

�� setkey -DP � ��
� �� netfilter'� � FORWARD'� �� ޣ� �� ipip ��

OpenForum RSS: ��� ������� Racoon

��� ������� Racoon (TaxucT)

��� ������� Racoon (a2l)

��� ������� Racoon (pavel_simple)

OpenForum RSS: �� Racoon

�� Racoon (TaxucT)

�� Racoon (a2l)

�� Racoon (pavel_simple)