IPsec spadne pri prenosu velkeho souboru

Večeřa Antonín antonin.vecera at jme.cz
Thu Feb 26 12:15:00 CET 2004


Kratce:

Mam nastavene IPsec mezi FreeBSD a WinXP.
V okamziku kdy zacnu prenaset velke mnozstvi
dat, tak mi FreeBSD po chvili prestane komunikovat.
Setkal se nekdo s necim takovym?
Kde by mohl byt problem?
Budu vdecny za dazdy namet...

Antonin V.

-----------------------------------------------------
Podrobneji:
Na WinXP otevru SSH a zacnu prenaset testovaci soubor
o velikosti asi 360MB. VZDY takrka presne ve 42% mi
spadne komunikace.
Musim na WinXP shodit IPsec (pote se stale nepripojim
na FreeBSD) a resetnout FreeBSD. Po nabehnuti se uz
muzu nalogovat.

Nejaky klic vyexpiruje?
Nebo pretece nejaky buffer?
-----------------------------------------------------
/etc/ipsec.conf

spdadd 0.0.0.0/0 192.168.0.2/32 any -P in ipsec esp/tunnel/192.168.0.1-192.168.0.2/use;
spdadd 192.168.0.2/32 0.0.0.0/0 any -P out ipsec esp/tunnel/192.168.0.2-192.168.0.1/use;
-----------------------------------------------------
racoon.conf:

path pre_shared_key "/usr/local/etc/racoon/psk.txt";
 
remote anonymous {
        exchange_mode aggressive, main;
        lifetime time 8 hour;
        proposal {
                encryption_algorithm 3des;
                hash_algorithm sha1;
                authentication_method pre_shared_key;
                dh_group 2;
        }
}
 
sainfo anonymous {
        lifetime time 1 hour;
        encryption_algorithm aes, 3des;
        authentication_algorithm hmac_sha1, hmac_md5;
        compression_algorithm deflate;
}




More information about the Users-l mailing list