[Soekris] Problems with the vpn1201
Jaime Vargas
jev at mac.com
Fri Apr 12 02:06:56 UTC 2002
Hello:
We had been testing the Soekris NET4501 with OpenBSD 3.0 using
the HiFn vpn1201
and vpn1211 for ipsec encryption. The network looks like this:
Network Network
Engines Soekris Soekris Engines
Blazer NET4501 NET4501 Blazer
End host ----- gateway1 ----- gateway2 ----- End host
10.10.0.15 10.10.0.1 192.168.2.1 192.168.2.1
& 90.0.0.1 & 90.0.0.2
The end hosts systems are running OpenBSD 2.8. We were
successful in getting
an ipsec tunnel running using the vpn1211 (the miniPCI version).
But when we
use the vpn1201 (the PCI version) the tunnel gets established
however no traffic
goes thru. We are using ping and ttcp for performance testing.
Attached are the dmesgs for both gateways in both scenarios
(vpn1211 and vpn1201).
The only difference that I can notice is that the HiFn are
registering as
different device elements in each case. It is my understanding that the
cards are equal and they just differ in the type of bus
interface. So I don't
see why the miniPCI version works, while the PCI version don't.
Obviously
the OS is recognizing both.
Thanks for the help, Jaime
==========
SCENARIO 1: IPSec tunnel works with the vpn1211
gateway1# dmesg
OpenBSD 3.0 (NET4501) #0: Tue Apr 9 21:31:22 EDT 2002
root at nebula:/usr/src/sys-30/sys/arch/i386/compile/NET4501
cpu0: AMD Am486DX4 W/B or Am5x86 W/B 150 ("AuthenticAMD" 486-class)
cpu0: FPU
real mem = 66695168 (65132K)
avail mem = 59981824 (58576K)
using 839 buffers containing 3436544 bytes (3356K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 20/20/18, BIOS32 rev.
0 @ 0xf00c0
pcibios0 at bios0: rev. 2.0 @ 0xf0000/0x10000
pcibios0: pcibios_get_intr_routing - function not supported
pcibios0: PCI IRQ Routing information unavailable.
pcibios0: PCI bus #0 is the last bus
bios0: ROM list: 0xc8000/0xa000
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "AMD ElanSC520 Host-PCI" rev 0x00
hifn0 at pci0 dev 16 function 0 "Hifn 7951" rev 0x01: 3DES,
128KB sram, irq 10
sis0 at pci0 dev 18 function 0 "National Semiconductor DP83815
10/100" rev 0x00: irq 11 address 00:00:24:c0:0c:e4
nsphyter0 at sis0 phy 0: DP83815 10/100 integrated, rev. 1
sis1 at pci0 dev 19 function 0 "National Semiconductor DP83815
10/100" rev 0x00: irq 5 address 00:00:24:c0:0c:e5
nsphyter1 at sis1 phy 0: DP83815 10/100 integrated, rev. 1
sis2 at pci0 dev 20 function 0 "National Semiconductor DP83815
10/100" rev 0x00: irq 9 address 00:00:24:c0:0c:e6
nsphyter2 at sis2 phy 0: DP83815 10/100 integrated, rev. 1
isa0 at mainbus0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard
wdc0 at isa0 port 0x1f0/8 irq 14
wd0 at wdc0 channel 0 drive 0: <LEXAR ATA FLASH>
wd0: 1-sector PIO, LBA, 61MB, 978 cyl, 4 head, 32 sec, 125184 sectors
wd0(wdc0:0:0): using BIOS timings
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom0: console
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
biomask 4000 netmask 4e20 ttymask 4e22
dkcsum: wd0 matched BIOS disk 80
rootdev=0x0 rrootdev=0x300 rawdev=0x302
gateway2# dmesg
OpenBSD 3.0 (NET4501) #0: Tue Apr 9 21:31:22 EDT 2002
root at nebula:/usr/src/sys-30/sys/arch/i386/compile/NET4501
cpu0: AMD Am486DX4 W/B or Am5x86 W/B 150 ("AuthenticAMD" 486-class)
cpu0: FPU
real mem = 66695168 (65132K)
avail mem = 59981824 (58576K)
using 839 buffers containing 3436544 bytes (3356K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 20/20/18, BIOS32 rev.
0 @ 0xf00c0
pcibios0 at bios0: rev. 2.0 @ 0xf0000/0x10000
pcibios0: pcibios_get_intr_routing - function not supported
pcibios0: PCI IRQ Routing information unavailable.
pcibios0: PCI bus #0 is the last bus
bios0: ROM list: 0xc8000/0xa000
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "AMD ElanSC520 Host-PCI" rev 0x00
hifn0 at pci0 dev 16 function 0 "Hifn 7951" rev 0x01: 3DES,
128KB sram, irq 10
sis0 at pci0 dev 18 function 0 "National Semiconductor DP83815
10/100" rev 0x00: irq 11 address 00:00:24:c0:0f:58
nsphyter0 at sis0 phy 0: DP83815 10/100 integrated, rev. 1
sis1 at pci0 dev 19 function 0 "National Semiconductor DP83815
10/100" rev 0x00: irq 5 address 00:00:24:c0:0f:59
nsphyter1 at sis1 phy 0: DP83815 10/100 integrated, rev. 1
sis2 at pci0 dev 20 function 0 "National Semiconductor DP83815
10/100" rev 0x00: irq 9 address 00:00:24:c0:0f:5a
nsphyter2 at sis2 phy 0: DP83815 10/100 integrated, rev. 1
isa0 at mainbus0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard
wdc0 at isa0 port 0x1f0/8 irq 14
wd0 at wdc0 channel 0 drive 0: <LEXAR ATA FLASH>
wd0: 1-sector PIO, LBA, 61MB, 984 cyl, 4 head, 32 sec, 125952 sectors
wd0(wdc0:0:0): using BIOS timings
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom0: console
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
biomask 4000 netmask 4e20 ttymask 4e22
dkcsum: wd0 matched BIOS disk 80
rootdev=0x0 rrootdev=0x300 rawdev=0x302
==========
SCENARIO 2: IPSec doesn't work it looks like the HiFn card are
not forwarding
the packets.
gateway1# dmesg
OpenBSD 3.0 (NET4501) #0: Tue Apr 9 21:31:22 EDT 2002
root at nebula:/usr/src/sys-30/sys/arch/i386/compile/NET4501
cpu0: AMD Am486DX4 W/B or Am5x86 W/B 150 ("AuthenticAMD" 486-class)
cpu0: FPU
real mem = 66695168 (65132K)
avail mem = 59981824 (58576K)
using 839 buffers containing 3436544 bytes (3356K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 20/20/18, BIOS32 rev.
0 @ 0xf00c0
pcibios0 at bios0: rev. 2.0 @ 0xf0000/0x10000
pcibios0: pcibios_get_intr_routing - function not supported
pcibios0: PCI IRQ Routing information unavailable.
pcibios0: PCI bus #0 is the last bus
bios0: ROM list: 0xc8000/0xa000
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "AMD ElanSC520 Host-PCI" rev 0x00
hifn0 at pci0 dev 17 function 0 "Hifn 7951" rev 0x01: 3DES,
128KB sram, irq 10
sis0 at pci0 dev 18 function 0 "National Semiconductor DP83815
10/100" rev 0x00: irq 11 address 00:00:24:c0:0c:e4
nsphyter0 at sis0 phy 0: DP83815 10/100 integrated, rev. 1
sis1 at pci0 dev 19 function 0 "National Semiconductor DP83815
10/100" rev 0x00: irq 5 address 00:00:24:c0:0c:e5
nsphyter1 at sis1 phy 0: DP83815 10/100 integrated, rev. 1
sis2 at pci0 dev 20 function 0 "National Semiconductor DP83815
10/100" rev 0x00: irq 9 address 00:00:24:c0:0c:e6
nsphyter2 at sis2 phy 0: DP83815 10/100 integrated, rev. 1
isa0 at mainbus0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard
wdc0 at isa0 port 0x1f0/8 irq 14
wd0 at wdc0 channel 0 drive 0: <LEXAR ATA FLASH>
wd0: 1-sector PIO, LBA, 61MB, 978 cyl, 4 head, 32 sec, 125184 sectors
wd0(wdc0:0:0): using BIOS timings
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom0: console
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
biomask 4000 netmask 4e20 ttymask 4e22
dkcsum: wd0 matched BIOS disk 80
rootdev=0x0 rrootdev=0x300 rawdev=0x302
gateway2# dmesg
OpenBSD 3.0 (NET4501) #0: Tue Apr 9 21:31:22 EDT 2002
root at nebula:/usr/src/sys-30/sys/arch/i386/compile/NET4501
cpu0: AMD Am486DX4 W/B or Am5x86 W/B 150 ("AuthenticAMD" 486-class)
cpu0: FPU
real mem = 66695168 (65132K)
avail mem = 59981824 (58576K)
using 839 buffers containing 3436544 bytes (3356K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(00) BIOS, date 20/20/18, BIOS32 rev.
0 @ 0xf00c0
pcibios0 at bios0: rev. 2.0 @ 0xf0000/0x10000
pcibios0: pcibios_get_intr_routing - function not supported
pcibios0: PCI IRQ Routing information unavailable.
pcibios0: PCI bus #0 is the last bus
bios0: ROM list: 0xc8000/0xa000
pci0 at mainbus0 bus 0: configuration mode 1 (bios)
pchb0 at pci0 dev 0 function 0 "AMD ElanSC520 Host-PCI" rev 0x00
hifn0 at pci0 dev 17 function 0 "Hifn 7951" rev 0x01: 3DES,
128KB sram, irq 10
sis0 at pci0 dev 18 function 0 "National Semiconductor DP83815
10/100" rev 0x00: irq 11 address 00:00:24:c0:0f:58
nsphyter0 at sis0 phy 0: DP83815 10/100 integrated, rev. 1
sis1 at pci0 dev 19 function 0 "National Semiconductor DP83815
10/100" rev 0x00: irq 5 address 00:00:24:c0:0f:59
nsphyter1 at sis1 phy 0: DP83815 10/100 integrated, rev. 1
sis2 at pci0 dev 20 function 0 "National Semiconductor DP83815
10/100" rev 0x00: irq 9 address 00:00:24:c0:0f:5a
nsphyter2 at sis2 phy 0: DP83815 10/100 integrated, rev. 1
isa0 at mainbus0
isadma0 at isa0
pckbc0 at isa0 port 0x60/5
pckbd0 at pckbc0 (kbd slot)
pckbc0: using irq 1 for kbd slot
wskbd0 at pckbd0: console keyboard
wdc0 at isa0 port 0x1f0/8 irq 14
wd0 at wdc0 channel 0 drive 0: <LEXAR ATA FLASH>
wd0: 1-sector PIO, LBA, 61MB, 984 cyl, 4 head, 32 sec, 125952 sectors
wd0(wdc0:0:0): using BIOS timings
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom0: console
pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo
biomask 4000 netmask 4e20 ttymask 4e22
dkcsum: wd0 matched BIOS disk 80
rootdev=0x0 rrootdev=0x300 rawdev=0x302
More information about the Soekris-tech
mailing list