Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a Linux IPSec Tunnel between a GGSN of a network operator and our data center. The IPSec works fine for all traffic but IP Packets coming from our side and are marked with ECN bit set to 0x3 (CE, Congestion experianced) will not encrypted and forwarded to the tunnel.

The Tunnel is setup without ECN support, but for my understanding this should not lead to a packet drop.

Linux Kernel Version is 2.6.18-6-xen-amd64 #1 SMP Fri Dec 12 07:02:03 UTC 2008 x86_64 GNU/Linux (quite old but the xen infrastructure does not allow newer kernels)

Keying Daemon is racoon 0.7.3

Any hints how to overcome this problem?

share|improve this question

1 Answer 1

If you're using Openswan as I presume, you'll get an answer fastest from #openswan on irc.freenode.net -- that's where the devs hang out, and they will often ask lots of good questions to help you debug your situation.

share|improve this answer
    
Well its not openswan, but the stock kernel KAME Implementation –  Lairsdragon Feb 1 '12 at 20:22
    
Try openswan then ;-) openswan.org –  mikebabcock Feb 7 '12 at 14:48

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.