If you're using -unstable, look for an earlier thread about using
ethtool to disable checksum offload on the virtual interfaces. We do
need to fix the underlying problem at some point, though.
Ian
> I'm trying to build a RoadWarrior VPN Gateway using openswan 
> 2.4.0rc3 on a xen 2.0.7 domU. I'm having a bit of trouble 
> and before I beat my head against the wall for hours, I was 
> wondering if anyone else has done this and can give me some pointers.
>
> I am not using L2TP so I should not have the driver problem. 
> When I disable ipsec on both the xen station and the 
> CyberGuard SG580 were using for testing as the office gateway 
> (as opposed to the RAS gateway), they can ping each other 
> fine. When I enable ipsec, it's as if the xen station does 
> not want to listen to the SG. The SG sends MI1 and there is 
> no response. The xen device sends MI1, the SG send MR1 and 
> xen ignores it.
>
> The same configuration with a non-xen gateway works fine. 
> Please don't spend lots of time on this as I should put more 
> time in myself before really crying for help but, if someone 
> has done this or knows what the problem is, please let me 
> know. Thanks - John
> --
> John A. Sullivan III
> Open Source Development Corporation
> +1 207-985-7880
> jsullivan@xxxxxxxxxxxxxxxxxxx
>
> If you would like to participate in the development of an 
> open source enterprise class network security management 
> system, please visit http://iscs.sourceforge.net 
>
>
> _______________________________________________
> Xen-users mailing list
> Xen-users@xxxxxxxxxxxxxxxxxxx
> http://lists.xensource.com/xen-users 
>
_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users