Hi friends,



for my ipsec policy configaration ,I am using racoon.
I am getting the problem after ping6ing from one to another.( It is ping ing properly)But the key is not generating.
Here I am using ipv6 .and setting the policy by setkey option for transport mode.

here is racoon.log
==============
tail -f /var/log/racoon.log
2006-09-15 14:28:41: INFO: 127.0.0.1[500] used as isakmp port (fd=5)
2006-09-15 14:28:41: INFO: fe80::1%lo0[500] used as isakmp port (fd=6)
2006-09-15 14:28:41: INFO: ::1[500] used as isakmp port (fd=7)
2006-09-15 14:28:41: INFO: 192.168.1.220[500] used as isakmp port (fd=8)
2006-09-15 14:28:41: INFO: fe80::250:baff:fe8d:3866%rl0[500] used as isakmp port (fd=9)
2006-09-15 14:29:05: INFO: 127.0.0.1[500] used as isakmp port (fd=5)
2006-09-15 14:29:05: INFO: fe80::1%lo0[500] used as isakmp port (fd=6)
2006-09-15 14:29:05: INFO: ::1[500] used as isakmp port (fd=7)
2006-09-15 14:29:05: INFO: 192.168.1.220[500] used as isakmp port (fd=8)
2006-09-15 14:29:05: INFO: fe80::250:baff:fe8d:3866%rl0[500] used as isakmp port (fd=9)
======================


racoon.conf
==========
path pre_shared_key "/usr/local/etc/racoon2/psk.txt";
log notify;

padding
{
maximum_length 20;
randomize off;
strict_check off;
exclusive_tail off;
}
remote anonymous
{
exchange_mode aggressive;
doi ipsec_doi;
situation identity_only;

nonce_size 16;
lifetime time 55 min;
initial_contact on;
support_proxy on;
proposal_check obey;

proposal
{
encryption_algorithm 3des;
hash_algorithm md5;
authentication_method pre_shared_key ;
dh_group 2 ;
}
}

sainfo anonymous
{
pfs_group 1;
lifetime time 36000 sec;
encryption_algorithm 3des,des,cast128,blowfish ;
authentication_algorithm hmac_sha1,hmac_md5;
compression_algorithm deflate ;
}
=========================
psk.txt
==========
fe80::2e0:4cff:fee7:dc61 1234567890098765
=========================

Can any one help me out to solve this..

Hi friends,

Can any one tell me how to configure racoon for IPv6?
Is it the same as IPv4? or is it different?


Here is my racoon.conf
=========================
racoon.conf
==========
path pre_shared_key "/usr/local/etc/racoon2/psk.txt";
log notify;

padding
{
maximum_length 20;
randomize off;
strict_check off;
exclusive_tail off;
}
remote anonymous
{
exchange_mode aggressive;
doi ipsec_doi;
situation identity_only;

nonce_size 16;
lifetime time 55 min;
initial_contact on;
support_proxy on;
proposal_check obey;

proposal
{
encryption_algorithm 3des;
hash_algorithm md5;
authentication_method pre_shared_key ;
dh_group 2 ;
}
}

sainfo anonymous
{
pfs_group 1;
lifetime time 36000 sec;
encryption_algorithm 3des,des,cast128,blowfish ;
authentication_algorithm hmac_sha1,hmac_md5;
compression_algorithm deflate ;
}
================================


thanks in advance