On Mon, 30 Nov 2009, Avesh Agarwal wrote: > it unloads KLIPS loading NETKEY > > I think, check your ipsec.conf if it has line "protostack=netkey", and remove that. Also with no protostack= line, it defaults to netkey as well. This was to make things easier on stock kernels that have no klips. Paul