linux-ipsec: freeswan-0.90 works, then hangs

Hi everyone,

I've been following along for several months now with interest, and I finally found a couple machines and network cards around here to try freeswan out.

I followed Randy Dees' mini-howto with success. Thanks for very straightforward instructions, Randy. I'd like to see the step-by-step commands from the first version combined into the revised version; it was great to quickly get things running with pluto, but I'd like to know how to make things work step-by-step similar to the instructions still lingering in rgb_setup.txt. (Plus, it'd help prevent so many reboots while there is a problem with pluto.)

I'm having a bit a problem with the VPN hanging once it's established. I've got two machines running RedHat 5.1; I downloaded the Linux 2.0.35 kernel, and recompiled it with the bare necessities and IPSec. I also compiled the options for IP Masquerading into it, but haven't used them yet.

When I reboot the two machines, the VPN comes up. And, I'm able to use it. But, it seems that as soon as I start sending heavy traffic over the server, it decides to hang. I initially try a ping session, then move to collecting mail via POP, and then open an X session. It usually hangs on the X session.

By the way, I'm doing the tests on a local hub with four machines. (The two vpn machines, and then another machine on each subnet.)

Does anyone know if this is expected with freeswan-0.90? Has it been fixed in any of the latest snapshots?

I'd be happy to provide more information (logs, etc.) as requested.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

Cheers,
Sean.

-- 
Sean Healy
Systems Administrator		Phone:	(416) 594-1026 ext. 768
KL Group Inc.			Fax:	(416) 594-1919
Toronto, Ontario, Canada	email:	sch@klg.com