<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=gb2312">
<META content="MSHTML 5.50.4134.600" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2>hello!</FONT></DIV>
<DIV><FONT size=2>I'm configuring security gateways using openswan-2.3.1 on
linux2.6.10 now</FONT></DIV>
<DIV><FONT size=2>when I use the native ipsec stack of linux,it's ok,ipsec sa
can be setup,</FONT></DIV>
<DIV><FONT size=2>and I can ping from one subnet to another.</FONT></DIV>
<DIV><FONT size=2>when I use klips,the ipsec sa can still be setup,but ping
fail.</FONT></DIV>
<DIV><FONT size=2>using ifconfig,I found there is a new interface:
ipsec0</FONT></DIV>
<DIV><FONT size=2>and ICMP packets were dropped there,why?</FONT></DIV>
<DIV><FONT size=2>In both situation I use the same configuration.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Thanks a lot</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>gxshen</FONT></DIV></BODY></HTML>