Re: linux-ipsec: FRP [bad hdr length]

From: Kai Martius <admin(at)imib.med.tu-dresden.de>
Date: Thu Feb 19 1998 - 09:20:07 EST

Hi,

> on gelaser i use, with the values from the install doc:
>
> tncfg attach ipsec0 eth0
> ifconfig ipsec0 194.109.0.29 netmask 255.255.255.0
> route add 194.109.0.109 dev ipsec0
>
> addrt 194.109.0.29 255.255.255.255 194.109.0.109 255.255.255.255
> 194.109.0.109 1 25 setsa 194.109.0.109 125 esp 3des-md5-96 i
> 1000000000000001 6630663066303132 setsa 194.109.0.29 125 esp
> 3des-md5-96 i 1000000000000001 6630663066303132

                     ^^^^

you can't use the same SPI value in both directions. INSTALL.doc uses 125 in the one dir., 135 in the other. That should be the reason why it doesn't work. It could be the reason for the crash.

for a "visual" install.doc see my web page I announced some days ago here.

Greetings
Kai

# Kai Martius                                                           #
# Dpt. of Medical CS and Biometrics / Dresden University of Technology  #
# PGP Fingerprint:  to be compared after download of my key             #
# available at 
http://www.imib.med.tu-dresden.de/imib/personal/kai.html #
#                                                                       #
# See our project (and me) at CeBit'98 fair Hannover/Germany 19-25.3.98 #
# Infos: 
http://www.inf.tu-dresden.de/~hf2/cebit98                      #

Received on Thu Feb 19 10:11:15 1998