[ILUG] (Somewhat OffTopic) Connecting Solaris and Linux with IPsec
Conor Lennon
clennon at accuris.ie
Wed Oct 30 14:35:07 GMT 2002
Hi,
I'm trying to connect a Solaris 8 Sparc machine an Linux Intel machine
with IPsec.
I have the linux side sorted out, but I'm seeing some odd behaviour on
the solaris side:
I have created a /etc/inet/ipseckey file as follows:
flush
add esp spi 0x323 src 10.248.49.22 dst 10.248.49.23 \
auth_alg md5 encr_alg 3des \
authkey 2c02e4555aae74b3e727c6967c903379 \
encrkey d9ca15512cf07108cde84c660ddc1b8cabcdef0123456789
add esp spi 0x323 src 10.248.49.23 dst 10.248.49.22 \
auth_alg md5 encr_alg 3des \
authkey 2c02e4555aae74b3e727c6967c903379 \
encrkey d9ca15512cf07108cde84c660ddc1b8cabcdef0123456789
When I do ipseckey -f /etc/inet/ipseckey I get:
# ipseckey -f /etc/inet/ipseckey
Reply message from PF_KEY timed out.
I've come across other people who have got the same, but have no idea on
know to fix it.
The answer I've got is that ipsec doesn't work on Solaris 8, but is
fixed on Solaris 9.
I've had a look at patches for Solaris 8, but can't fins anything related.
Unforntunately upgrading to Solaris 9 isn't an option at the moment.
Has anyone seen this error before, and does anyone know how to fix the
problem?
Conor
More information about the ILUG
mailing list