VPN established but no traffic through the tunnel

eri--

To me it is just those not set are considered debugging options, tcpdump in enc0. So while debugging makes sense you enable those otherwise it is just 'overhead'.
Since 2.0 allows you to set such values from the gui i consider them unnecessary.

jzsjr

I am using:
2.0-ALPHA-ALPHA
built on Fri Apr 3 21:18:02 EDT 2009
FreeBSD 7.1-RELEASE-p4

and still afflicted with the vpn tunnel staying up but no data passing. There was a fix provided by Sullrich earlier in this thread and I hope still works though I'm not real sure what it does. This is happening to a colleague of mine too. We have used both the full install on a server base and the embedded install with the same results. The vpn will work wonderfully for hours and then just stop passing data. I have gotten to the point where I merely reboot the racoon service now. I have recently updated so I'll apply the commands below and see how they go again. I was hoping someone could explain what these commands accomplish and why they might not be permanently changed in a release.

sysctl net.enc.out.ipsec_bpf_mask=0x00000002
sysctl net.enc.out.ipsec_filter_mask=0x00000002
sysctl net.enc.in.ipsec_bpf_mask=0x00000001
sysctl net.enc.in.ipsec_filter_mask=0x00000001

thanks,
Jim

Accounts

is this still going on in current snapshots? I wanted to update to check NAT redirection but fear ipsec problems since all is good as of my current march 22 build with ipsec.

jzsjr

yes. I posted the current release I am using.

Jim

jzsjr

I just had an RDP session and outlook connected to an exchange server data stop. The tunnel was still showing open. Is there any logs I can send in?

thanks,
Jim