[ILUG] (Somewhat OffTopic) Connecting Solaris and Linux with IPsec

Conor Lennon clennon at accuris.ie
Wed Oct 30 14:35:07 GMT 2002


Hi,
I'm trying to connect a Solaris 8 Sparc machine an Linux Intel machine 
with IPsec.
I have the linux side sorted out, but I'm seeing some odd behaviour on 
the solaris side:

I have created a /etc/inet/ipseckey file as follows:
flush

add esp spi 0x323 src 10.248.49.22 dst 10.248.49.23 \
         auth_alg md5 encr_alg 3des \
         authkey 2c02e4555aae74b3e727c6967c903379 \
         encrkey d9ca15512cf07108cde84c660ddc1b8cabcdef0123456789

add esp spi 0x323 src 10.248.49.23 dst 10.248.49.22 \
         auth_alg md5 encr_alg 3des \
         authkey 2c02e4555aae74b3e727c6967c903379  \
         encrkey d9ca15512cf07108cde84c660ddc1b8cabcdef0123456789


When I do ipseckey -f /etc/inet/ipseckey I get:

# ipseckey -f /etc/inet/ipseckey
Reply message from PF_KEY timed out.


I've come across other people who have got the same, but have no idea on 
know to fix it.
The answer I've got is that ipsec doesn't work on Solaris 8, but is 
fixed on Solaris 9.
I've had a look at patches for Solaris 8, but can't fins anything related.
Unforntunately upgrading to Solaris 9 isn't an option at the moment.
Has anyone seen this error before, and does anyone know how to fix the 
problem?

Conor




More information about the ILUG mailing list