From owner-IPv6-jp@jp.freebsd.org  Wed Nov 10 23:29:28 1999
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id XAA35384;
	Wed, 10 Nov 1999 23:29:28 +0900 (JST)
	(envelope-from owner-IPv6-jp@jp.FreeBSD.org)
Received: from fermi.wave.csse.muroran-it.ac.jp (IDENT:msan@wave.csse.muroran-it.ac.jp [157.19.135.144])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id XAA35379
	for <IPv6-jp@jp.freebsd.org>; Wed, 10 Nov 1999 23:29:28 +0900 (JST)
	(envelope-from msan@wave.csse.muroran-it.ac.jp)
Received: from localhost by fermi.wave.csse.muroran-it.ac.jp (8.9.3+3.2W/3.7W) id XAA04827; Wed, 10 Nov 1999 23:30:14 +0900
To: IPv6-jp@jp.freebsd.org
In-Reply-To: Your message of "Wed, 10 Nov 1999 22:09:17 +0900 (JST)"
	<199911101309.WAA00742@ghost.wide.ydc.co.jp>
References: <199911101309.WAA00742@ghost.wide.ydc.co.jp>
X-Mailer: Mew version 1.93 on Emacs 19.34 / Mule 2.3 (SUETSUMUHANA)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Content-Transfer-Encoding: 7bit
Message-Id: <19991110234126T.msan@wave.csse.muroran-it.ac.jp>
Date: Wed, 10 Nov 1999 23:41:26 +0900
From: Masahito SANKA <msan@wave.csse.muroran-it.ac.jp>
X-Dispatcher: imput version 980905(IM100)
Lines: 54
Reply-To: IPv6-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+990727
X-Sequence: IPv6-jp 337
Subject: [IPv6-jp 337] Re: set up IPsec
Errors-To: owner-IPv6-jp@jp.freebsd.org
Sender: owner-IPv6-jp@jp.freebsd.org
X-Originator: msan@wave.csse.muroran-it.ac.jp

$B$*@$OC$K$J$C$F$*$j$^$9!";02U$G$9!#B>$N(BFreeBSD$B%^%7%s$K(Bsnap$B$rF3F~Cf$G$9$,!"(B
$B@hDx$N%l%9$r;29M$K0zB3$-@_Dj$r$7$F$*$j$^$9!#$=$3$G!"A0=R$N@_Dj$r(B
setkey -c <<EOF
add address(hostA) address(hostB)[23] any 0x10004 -p ah -A hmac-md5 "hogehoge";
add address(hostB)[23] address(hostA) any 0x10005 -p ah -A hmac-md5 "hogehoge";
spdadd address(hostA) address(hostB)[23] any -P none:use:none:none;
$B$H=$@5$7$F!"(Bdump$B$,(B

address(hostA)/128[0] address(hostB)/128[23] any 
        ah spi=0x00001f3f replay=0 flags=0x00000000
        A: hmac-md5, 686f6765 686f6765 686f6765 686f6765
        state=mature seq=1 pid=41320
        created: Nov 10 22:34:10 1999   current: Nov 10 23:19:23 1999
        diff: 2713(s)   hard: 0(s)      soft: 0(s)
        current: 0(bytes)       hard: 0(bytes)  soft: 0(bytes)
        refcnt: sab=1 sa=0

address(hostB)/128[23] address(hostA)/128[0] any 
        ah spi=0x00001f3e replay=0 flags=0x00000000
        A: hmac-md5, 686f6765 686f6765 686f6765 686f6765
        state=mature seq=0 pid=41320
        created: Nov 10 22:34:59 1999   current: Nov 10 23:19:23 1999
        diff: 2664(s)   hard: 0(s)      soft: 0(s)
        current: 0(bytes)       hard: 0(bytes)  soft: 0(bytes)
        refcnt: sab=1 sa=0

$B$^$?!"(Bspddump$B$,(B
address(hostA)/128[0] address(hostB)/128[23] any NONE USE NONE NONE 
        state=mature
        refcnt: 0

$B$H$J$j!"<B83$r$7$?$H$3$m!"(Bnetstat -s$B$NI=<($,(B
ipsec:
        0 inbound packets processed successfully
        0 inbound packets violated process security policy
        0 inbound packets with no SA available
        0 inbound packets failed processing due to EINVAL
        0 inbound packets failed getting SPI
        0 inbound packets failed on AH replay check
        0 inbound packets failed on ESP replay check
        0 inbound AH packets considered authentic
        0 inbound AH packets failed on authentication
        0 inbound ESP packets considered authentic
        0 inbound ESP packets failed on authentication
        0 outbound packets processed successfully
        0 outbound packets violated process security policy
        0 outbound packets with no SA available
        0 outbound packets failed processing due to EINVAL
        0 outbound packets with no route
$B$H$J$j!":F$S<:GT$7$^$7$?!#(B
$B2?EY$b?=$7Lu$J$$$N$G$9$,!"0lBN2?$,LdBj$J$N$+J,$+$j$^$;$s!#(B
$B2?$i$+$NBP1~:v!"$^$?$O%"%I%P%$%959$7$/$*4j$$CW$7$^$9!#(B


