Re: [Ipsec-tools-users] Reg enabling IPV6 for Ipsec in suse

[kalyani k. <kal...@gm...>]

Hi,
Thanks for the information.
I have found out some of the kernel modules are not loaded in kernel for
ipv6.
esp6.ko,ah6.ko and transport mode module.I loaded the modules using
modprobe and I can see these modules using lsmod now.
But issue still exist,do you have any idea what modules are required for
Ipsec to enable ipv6 in kernel .

We have already tested for IPV4 it's working fine,but same is not working
for ipv6.
How we can check logs in debug mode.Please suggest.
BR,
Kalyani.k

On Sat, Oct 6, 2018, 10:40 PM Mick <mic...@gm...> wrote:

> Hi kalyani,
>
> Check your kernel config has CONFIG_INET6_* options suitable for IPSEC
> enabled.  If some kernel module is necessary for IPv6 setkey/racoon will
> complain when you run/start it, so check your logs for any relevant
> messages.
>
> To troubleshoot this problem take one step at a time.  First check your
> IPv4
> network, routing and IPSec all work without errors.  Then check your IPv6
> stack is working and you can ping remote peers.  Then check your logs for
> error messages when you try to initiate an ESP/AH connection with racoon.
> Increase verbosity and study the logs to debug the problem.
>
>
> On Saturday, 6 October 2018 15:28:56 BST kalyani kaniganti wrote:
> > Hi,
> > We are using ipsectools rpm version ipsec-tools-0.7.3_1.38.3.1 from sles
> 11
> > sp4 kernel.
> > We are using racoon as daemon .
> > We are using dual stack on os and trying to enable IPsec for IPV6 as well
> > and we have already provided support for IPV4.
> > I have done configuration same as ipv4 but ifind IPSEC- SA is not
> > initiating phase 1 authentication.
> > May I know we have to enable any other option on kernel to support Ipsec
> > for ipv6 we are trying to use ESP and AH protocols.
> >
> > Please suggest us
> > BR,
> > Kalyani.k
>
>
> --
> Regards,
> Mick