Hi Paul,<br><br>No matter how I undef or disable this CONFIG_IPSEC_NAT_TRAVERSAL, the result is the same: 'ipsec_nat_encap' undefined, and I 'grep' for 'ipsec_nat_encap', still found that the problem is in some assembly language file. I change to 2.4.4 OpenSWAN, and I can compile and insert the 'ipsec' kernel module without problem. Which means, the problem is like <font style="color: rgb(0, 0, 0);" color="#888888">Gilles</font> told me in the previous mail that I should use an old version instead the latest version. I'll try to use this 2.4.4 version. Thanks for your patient help :-)<br>
<br><div class="gmail_quote">On Thu, Jul 10, 2008 at 10:09 PM, Paul Wouters <<a href="mailto:paul@xelerance.com">paul@xelerance.com</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div class="Ih2E3d">On Thu, 10 Jul 2008, Tian Yazhou wrote:<br>
<br>
> I added a CONFIG_IPSEC_NAT_TRAVERSAL=n line in linux/net/ipsec/defconfig to<br>
> disable NAT-T, also tried remove this line. The result is same,<br>
> ipsec_nat_encap unknown when insert ipsec.ko into running kernel.<br>
><br>
> ipsec_nat_encap is defined in linux/net/ipsec/ipsec_xmit.c, but it is<br>
> undefed already by CONFIG_IPSEC_NAT_TRAVERSAL:<br>
> 1727<br>
> 1728 #ifdef CONFIG_IPSEC_NAT_TRAVERSAL<br>
<br>
</div>Don't use CONFIG_IPSEC_NAT_TRAVERSAL=n, but surround it with #if 0 in<br>
the linux/net/ipsec/defconfig file.<br>
<div class="Ih2E3d"><br>
> I think the problem is in several assembly language file, like<br>
> "modobj26/ipsec_mast.s":<br>
<br>
</div>rm -r modobj26 OBJ.*<br>
<br>
You should be building in an OBJ.* directory anyway, so i think you<br>
might have compiled it strangly once to get the modobj26 directory.<br>
<font color="#888888"><br>
Paul<br>
</font></blockquote></div><br><br clear="all"><br>-- <br>Dream as if you'll live forever; Live as if you'll die today. - James Dean