[Openswan Users] Configuration Help

[Paul Wouters]

On Tue, 13 Feb 2007, Josh wrote:

> The good news:
>
> We were able to get the configuration to work!
>
> The bad news:
>
> So far the configuration will work on kernel 2.4.21-37 i686 but it freezes
> the system when we run it on kernel 2.6.9-42 x86_64

Is that a RHEL4/Centos kernel? If so, it would explain the failure. Don't use
that kernel for IPsec (either NETKEY or KLIPS) as it is just too broken for
either. Try replacing the RHEL4/Centos kernel/system with a FC6 one.

> Is the 2.6 NAT-T patch required for building and using the openswan module
> under the 2.6 kernel?

If using KLIPS yes, if using NETKEY, no.

Paul