From: Guennadi Liakhovetski <lg@denx.de>
To: netdev@vger.kernel.org
Subject: IPSec in tunnel mode on ARM not working
Date: Sat, 10 Nov 2007 12:57:13 +0100 (CET) [thread overview]
Message-ID: <Pine.LNX.4.64.0711101243590.3320@axis700.grange> (raw)
Hi
Got two setups: with an ARM-based router and with a PC, connecting to
a remote site using IPSec in tunnel mode over ppp. Setup is identical,
PC works, ARM router doesn't. Kernel 2.6.23.1.
The setup looks like
PCa --- routerA ==----== routerB --- PCb
where routerA is our problematic router. We issue ping from PCa to PCb, we
see ICMP packet coming to PCb, being answered, coming back to routerA, and
there it doesn't get through to PCa. We see it with iptables LOG coming
into the INPUT chain, and that's about it.
Does anyone haveexperiences with IPSec in tunnel mode on ARM? Or does
anyone have debugging ideas? Is there a description somewhere how an
incoming packet traverses the networking stack in such a setup?
Thanks
Guennadi
---
Guennadi Liakhovetski, Ph.D.
DENX Software Engineering GmbH, MD: Wolfgang Denk & Detlev Zundel
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: +49-8142-66989-0 Fax: +49-8142-66989-80 Email: office@denx.de
reply other threads:[~2007-11-10 11:57 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=Pine.LNX.4.64.0711101243590.3320@axis700.grange \
--to=lg@denx.de \
--cc=netdev@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox