Re: [Ipsec-tools-users] Reg enabling IPV6 for Ipsec in suse

[Mick <mic...@gm...>]

Hi kalyani,

Check your kernel config has CONFIG_INET6_* options suitable for IPSEC 
enabled.  If some kernel module is necessary for IPv6 setkey/racoon will 
complain when you run/start it, so check your logs for any relevant messages.

To troubleshoot this problem take one step at a time.  First check your IPv4 
network, routing and IPSec all work without errors.  Then check your IPv6 
stack is working and you can ping remote peers.  Then check your logs for 
error messages when you try to initiate an ESP/AH connection with racoon.  
Increase verbosity and study the logs to debug the problem.


On Saturday, 6 October 2018 15:28:56 BST kalyani kaniganti wrote:
> Hi,
> We are using ipsectools rpm version ipsec-tools-0.7.3_1.38.3.1 from sles 11
> sp4 kernel.
> We are using racoon as daemon .
> We are using dual stack on os and trying to enable IPsec for IPV6 as well
> and we have already provided support for IPV4.
> I have done configuration same as ipv4 but ifind IPSEC- SA is not
> initiating phase 1 authentication.
> May I know we have to enable any other option on kernel to support Ipsec
> for ipv6 we are trying to use ESP and AH protocols.
> 
> Please suggest us
> BR,
> Kalyani.k


-- 
Regards,
Mick