[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: VPN ISAKMPD

To: misc_(_at_)_openbsd_(_dot_)_org
Subject: Re: VPN ISAKMPD
From: Steve Murdoch <murdoch-technology_(_at_)_bigpond_(_dot_)_com>
Date: Sun, 28 Nov 2004 14:11:57 +1100

yo2lux wrote:

http://www.antioffline.com/ipsec/openbsdipsec.html
----- Original Message ----- From: "Steve Murdoch" <murdoch-technology_(_at_)_bigpond_(_dot_)_com> To: <misc_(_at_)_openbsd_(_dot_)_org> Sent: Saturday, November 27, 2004 2:23 PM Subject: VPN ISAKMPD
I have been struggling with an automatic keyed vpn using 3.6 for the past 2 days solid. A few posts mention they were helped by faq 13 which has been pulled from the website. Is this information still available anywhere ?
Thanks,
Steve


Thanks,

I still have had no joy with this issue. I feel I am missing something simple but cannot identify it. I have two machines both with 3.6 that I am trying to setup a vpn between. The openbsd boxes are both behind cisco routers which allow traffic to port udp 500 and protocol 50

If I am reading the output correctly, the tunnel is being established but I cannot ping the remote network from either side. tcpdump -i enc0 shows no activity.

I couldnt find too much information on the routing process for the VPN so I have directed the traffic for the remote internal network to the local gateway ip address. I was thinking this should be directed to enc0 but I couldnt get this to occur.

Any thoughts or feedback would be appreciated.

Steve

#TAIL OF MINCH ISAKMPD -D -DA=99 003921.470775 Trpt 95 transport_release: transport 0x3c06c140 had 1 references 003921.470878 Trpt 70 transport_release: freeing 0x3c06c140 003921.470982 Trpt 90 udp_remove: removed transport 0x3c06c1c0 003921.471092 Trpt 90 udp_remove: removed transport 0x3c06c180 003921.471199 Trpt 90 virtual_remove: removed 0x3c06c140 003921.471304 SA 80 sa_release: SA 0x3c067c00 had 4 references 003921.471444 Trpt 95 transport_fd_set: transport 0x3c1ecd00 (virtual 0x3c1ecc80) fd 10 003921.471532 Trpt 95 transport_fd_set: transport 0x3c1eccc0 (virtual 0x3c1ecc80) fd 9 003958.350027 Timr 10 timer_handle_expirations: event connection_checker(0x3c1eabf0) 003958.350324 Misc 95 conf_get_str: configuration value not found [General]:check-interval 003958.350448 Timr 10 timer_add_event: event connection_checker(0x3c1eabf0) added before sa_soft_expire(0x3c130400), expiration in 60s 003958.350564 SA 90 sa_find: return SA 0x3c130400 003958.350671 Sdep 70 pf_key_v2_connection_check: SA for VPN-MINCH-HILLS exists 003958.350793 Trpt 95 transport_fd_set: transport 0x3c1ecd00 (virtual 0x3c1ecc80) fd 10

#TAIL OF HILLS ISAKMPD -D -DA=99 004548.323348 Trpt 95 transport_fd_set: transport 0x3c1ecc80 (virtual 0x3c1ecc40) fd 9 004648.332397 Timr 10 timer_handle_expirations: event connection_checker(0x3c1eabf0) 004648.332810 Misc 95 conf_get_str: configuration value not found [General]:check-interval 004648.333086 Timr 10 timer_add_event: event connection_checker(0x3c1eabf0) added before sa_soft_expire(0x3c067c00), expiration in 60s 004648.333348 SA 90 sa_find: return SA 0x3c067c00 004648.333593 Sdep 70 pf_key_v2_connection_check: SA for VPN-HILLS-MINCH exists 004648.333844 Trpt 95 transport_fd_set: transport 0x3c1eccc0 (virtual 0x3c1ecc40) fd 10

# HILLS_GATEWAY pf.conf

HILLS_GATEWAY = "777.777.84.226/32"
MINCH_GATEWAY = "666.666.192.45/32"
HILLS_NETWORK = "192.168.0.0/24"
MINCH_NETWORK = "10.0.50.0/24"
EXTERNAL_IF= "rtl0"
INTERNAL_IF= "fxp0"

#set block-policy drop
#scrub in all

# default deny
# $EXTERNAL_IF is the only interface going to the outside.
block in log on { enc0,$EXTERNAL_IF } all
block out log on { enc0, $EXTERNAL_IF } all


# Passing in encrypted traffic from security gateways
pass in proto esp from $MINCH_GATEWAY to $HILLS_GATEWAY
pass out proto esp from $HILLS_GATEWAY to $MINCH_GATEWAY

# Need to allow ipencap traffic on enc0.
pass in on enc0 proto ipencap all

# Passing in traffic from the designated subnets.
pass in on enc0 from $MINCH_NETWORK to $HILLS_NETWORK
pass out on enc0 from $HILLS_NETWORK to $MINCH_NETWORK

# Passing in isakmpd(8) traffic from the security gateways
pass in on $EXTERNAL_IF proto udp from $MINCH_GATEWAY \
port = 500 to $HILLS_GATEWAY port = 500
pass out on $EXTERNAL_IF proto udp from $HILLS_GATEWAY \
port = 500 to $MINCH_GATEWAY port = 500

# Permit ISAKMPD control traffic between ST and SM
pass in proto udp from $MINCH_GATEWAY to $HILLS_GATEWAY port = 500
pass out proto udp from $HILLS_GATEWAY to $MINCH_GATEWAY port = 500

# Permit SSH
pass in proto tcp from any to any port = 22 keep state


#MINCH_GATEWAY pf.conf

HILLS_GATEWAY = "777.777.84.226/32"
MINCH_GATEWAY = "666.666.192.45/32"
HILLS_NETWORK = "192.168.0.0/24"
MINCH_NETWORK = "10.0.50.0/24"
EXTERNAL_IF= "fxp0"
INTERNAL_IF= "fxp1"

scrub in all

# default deny
# EXTERNAL_IF is the only interface going to the outside.
block in log on { enc0, EXTERNAL_IF } all
block out log on { enc0, EXTERNAL_IF } all

# Passing in encrypted traffic from security gateways
pass out proto esp from $MINCH_GATEWAY to $HILLS_GATEWAY
pass in proto esp from $HILLS_GATEWAY to $MINCH_GATEWAY

# Need to allow ipencap traffic on enc0.
pass in on enc0 proto ipencap all

# Passing in traffic from the designated subnets.
pass out on enc0 from $MINCH_NETWORK to $HILLS_NETWORK
pass in on enc0 from $HILLS_NETWORK to $MINCH_NETWORK

# Passing in isakmpd(8) traffic from the security gateways pass out on EXTERNAL_IF proto udp from $MINCH_GATEWAY port = 500 to $HILLS_GATEWAY port = 500 pass in on EXTERNAL_IF proto udp from $HILLS_GATEWAY port = 500 to $MINCH_GATEWAY port = 500

# Permit ISAKMPD control traffic between ST and SM
pass out proto udp from $MINCH_GATEWAY to $HILLS_GATEWAY port = 500
pass in proto udp from $HILLS_GATEWAY to $MINCH_GATEWAY port = 500

pass in proto tcp from any to any port = 22 keep state

# MINCH ISAKMPD.CONF
# Incoming phase 1 negotiations are multiplexed on the source IP
# address. Phase 1 is used to set up a protected channel just
# between the two gateway machines. This channel is then used for
# the phase 2 negotiation traffic (i.e. encrypted & authenticated).

[General]
Retransmits=            5
Exchange-max-time=      120
Listen-on=              666.666.192.45

[Phase 1]
777.777.84.226=           HILLS

# 'Phase 2' defines which connections the daemon should establish.
# These connections contain the actual "IPsec VPN" information.

[Phase 2]
Connections=            VPN-MINCH-HILLS

# ISAKMP phase 1 peers (from [Phase 1])

[HILLS]
Phase=                  1
Transport=              udp
Local-address=          666.666.192.45
Address=                777.777.84.226
Configuration=          Default-main-mode
Authentication=         helpme

# IPSEC phase 2 connections (from [Phase 2])

[VPN-MINCH-HILLS]
Phase=                  2
ISAKMP-peer=            MINCH
Configuration=          Default-quick-mode
Local-ID=               MINCH-INTERNAL-NETWORK
Remote-ID=              HILLS-INTERNAL-NETWORK

# ID sections (as used in [VPN-MINCH-HILLS])

[MINCH-INTERNAL-NETWORK]
ID-type=                IPV4_ADDR_SUBNET
Network=                10.0.50.0
Netmask=                255.255.255.0

[HILLS-INTERNAL-NETWORK]
ID-type=                IPV4_ADDR_SUBNET
Network=                192.168.0.0
Netmask=                255.255.255.0

# Main and Quick Mode descriptions (as used by peers and connections)

[Default-main-mode]
DOI=                    IPSEC
EXCHANGE_TYPE=          ID_PROT
Transforms=             3DES-SHA,BLF-SHA

[Default-quick-mode]
DOI=                    IPSEC
EXCHANGE_TYPE=          QUICK_MODE
Suites=                 QM-ESP-3DES-SHA-SUITE


# HILLS ISAKMPD.CONF
# Incoming phase 1 negotiations are multiplexed on the source IP
# address. Phase 1 is used to set up a protected channel just
# between the two gateway machines. This channel is then used for
# the phase 2 negotiation traffic (i.e. encrypted & authenticated).
[General]
Retransmits=            5
Exchange-max-time=      120
Listen-on=              777.777.84.226
[Phase 1]
666.666.192.45=          MINCH

# 'Phase 2' defines which connections the daemon should establish.
# These connections contain the actual "IPsec VPN" information.

[Phase 2]
Connections=            VPN-HILLS-MINCH

# ISAKMP phase 1 peers (from [Phase 1])

[MINCH]
Phase=                  1
Transport=              udp
Local-address=          777.777.84.226
Address=                666.666.192.45
Configuration=          Default-main-mode
Authentication=         helpme

# IPSEC phase 2 connections (from [Phase 2])

[VPN-HILLS-MINCH]
Phase=                  2
ISAKMP-peer=            MINCH
Configuration=          Default-quick-mode
Local-ID=               HILLS-INTERNAL-NETWORK
Remote-ID=              MINCH-INTERNAL-NETWORK

# ID sections (as used in [VPN-HILLS-MINCH])

[HILLS-INTERNAL-NETWORK]
ID-type=                IPV4_ADDR_SUBNET
Network=                192.168.0.0
Netmask=                255.255.255.0

[MINCH-INTERNAL-NETWORK]
ID-type=                IPV4_ADDR_SUBNET
Network=                10.0.50.0
Netmask=                255.255.255.0

# Main and Quick Mode descriptions (as used by peers and connections)

[Default-main-mode]
DOI=                    IPSEC
EXCHANGE_TYPE=          ID_PROT
Transforms=             3DES-SHA,BLF-SHA

[Default-quick-mode]
DOI=                    IPSEC
EXCHANGE_TYPE=          QUICK_MODE
Suites=                 QM-ESP-3DES-SHA-SUITE

#HILLS ISAKMPD.POLICY
Keynote-version: 2

Authorizer: "POLICY"

Conditions: app_domain == "IPsec policy" &&
       esp_present == "yes" &&
       esp_enc_alg != "null" -> "true";


#MINCH ISAKMPD.POLICY
Keynote-version: 2

Authorizer: "POLICY"

Conditions: app_domain == "IPsec policy" &&
       esp_present == "yes" &&
       esp_enc_alg != "null" -> "true";


#MINCH ROUTE SHOW
Routing tables

Internet: Destination Gateway Flags Refs Use Mtu Interface default 666.666.192.38 UGS 0 6851 - fxp1 muttley localhost UGHS 0 0 33224 lo0 10.0.50/24 link#1 UC 0 0 - fxp0 loopback localhost UGRS 0 0 33224 lo0 localhost localhost UH 0 0 33224 lo0 192.168.0/24 666.666.192.45 UGS 0 177 - fxp1 666.666.192.32/28 link#2 UC 0 0 - fxp1 666.666.192.38 00:04:27:fc:c6:03 UHLc 0 0 - fxp1 666.666.192.45 00:d0:b7:c8:c7:7c UHLc 0 0 - lo0 BASE-ADDRESS.MCAST localhost URS 0 0 33224 lo0

Internet6: Destination Gateway Flags Refs Use Mtu Interface ::/104 localhost.murdoch- UGRS 0 0 - lo0 ::/96 localhost.murdoch- UGRS 0 0 - lo0 localhost.murdoch- localhost.murdoch- UH 0 0 33224 lo0 ::127.0.0.0/104 localhost.murdoch- UGRS 0 0 - lo0 ::224.0.0.0/100 localhost.murdoch- UGRS 0 0 - lo0 ::255.0.0.0/104 localhost.murdoch- UGRS 0 0 - lo0 ::ffff:0.0.0.0/96 localhost.murdoch- UGRS 0 0 - lo0 2002::/24 localhost.murdoch- UGRS 0 0 - lo0 2002:7f00::/24 localhost.murdoch- UGRS 0 0 - lo0 2002:e000::/20 localhost.murdoch- UGRS 0 0 - lo0 2002:ff00::/24 localhost.murdoch- UGRS 0 0 - lo0 fe80::/10 localhost.murdoch- UGRS 0 0 - lo0 fe80::%fxp0/64 link#1 UC 0 0 - fxp0 fe80::250:8bff:fee 00:50:8b:e8:7a:48 UHL 0 0 - lo0 fe80::%fxp1/64 link#2 UC 0 0 - fxp1 fe80::2d0:b7ff:fec 00:d0:b7:c8:c7:7c UHL 0 0 - lo0 fe80::%lo0/64 fe80::1%lo0 U 0 0 - lo0 fe80::1%lo0 link#6 UHL 0 0 - lo0 fec0::/10 localhost.murdoch- UGRS 0 0 - lo0 ff01::/32 localhost.murdoch- UC 0 0 - lo0 ff02::%fxp0/32 link#1 UC 0 0 - fxp0 ff02::%fxp1/32 link#2 UC 0 0 - fxp1 ff02::%lo0/32 localhost.murdoch- UC 0 0 - lo0

Encap: Source Port Destination Port Proto SA(Address/Proto/Type/Direction) af 30: Q01.00.01.0 (30) Q02.00.d4.20. UGS 0 0 - enc0 af 30: Q01.00.02.0 (30) Q02.00.00.20. UGS 0 0 - enc0

#HILLS ROUTE SHOW
Routing tables

Internet: Destination Gateway Flags Refs Use Mtu Interface default b0FE1.static.pacif UGS 0 16661 - rl0 10.0.50/24 b0FE2.static.pacif UGS 0 15 - rl0 loopback localhost UGRS 0 0 33224 lo0 localhost localhost UH 0 0 33224 lo0 192.168.0/24 link#1 UC 0 0 - fxp0 choochoo localhost UGHS 0 1 33224 lo0 b0FE0.static.pacif link#2 UC 0 0 - rl0 b0FE1.static.pacif 00:04:27:ef:29:80 UHLc 0 0 - rl0 b0FE2.static.pacif 00:10:b5:ef:dc:85 UHLc 0 0 - lo0 BASE-ADDRESS.MCAST localhost URS 0 0 33224 lo0

Internet6: Destination Gateway Flags Refs Use Mtu Interface ::/104 localhost.fishplu UGRS 0 0 - lo0 ::/96 localhost.fishplu UGRS 0 0 - lo0 localhost.fishplu localhost.fishplu UH 0 0 33224 lo0 ::127.0.0.0/104 localhost.fishplu UGRS 0 0 - lo0 ::224.0.0.0/100 localhost.fishplu UGRS 0 0 - lo0 ::255.0.0.0/104 localhost.fishplu UGRS 0 0 - lo0 ::ffff:0.0.0.0/96 localhost.fishplu UGRS 0 0 - lo0 2002::/24 localhost.fishplu UGRS 0 0 - lo0 2002:7f00::/24 localhost.fishplu UGRS 0 0 - lo0 2002:e000::/20 localhost.fishplu UGRS 0 0 - lo0 2002:ff00::/24 localhost.fishplu UGRS 0 0 - lo0 fe80::/10 localhost.fishplu UGRS 0 0 - lo0 fe80::%fxp0/64 link#1 UC 0 0 - fxp0 fe80::202:a5ff:fef 00:02:a5:fe:d0:d1 UHL 0 0 - lo0 fe80::%rl0/64 link#2 UC 0 0 - rl0 fe80::210:b5ff:fee 00:10:b5:ef:dc:85 UHL 0 0 - lo0 fe80::%lo0/64 fe80::1%lo0 U 0 0 - lo0 fe80::1%lo0 link#6 UHL 0 0 - lo0 fec0::/10 localhost.fishplu UGRS 0 0 - lo0 ff01::/32 localhost.fishplu UC 0 0 - lo0 ff02::%fxp0/32 link#1 UC 0 0 - fxp0 ff02::%rl0/32 link#2 UC 0 0 - rl0 ff02::%lo0/32 localhost.fishplu UC 0 0 - lo0

Encap: Source Port Destination Port Proto SA(Address/Proto/Type/Direction) af 30: Q01.00.01.0 (30) Q02.00.d4.80. UGS 0 0 - enc0 af 30: Q01.00.02.0 (30) Q02.00.00.80. UGS 0 0 - enc0


#HILLS NETSTAT -ARF ENCAP
Routing tables

Encap: Source Port Destination Port Proto SA(Address/Proto/Type/Direction) 10.0.50/24 0 192.168.0/24 0 0 666.666.192.45/50/use/in 192.168.0/24 0 10.0.50/24 0 0 666.666.192.45/50/require/out

#MINCH NETSTAT -ARF ENCAP
Routing tables

Encap: Source Port Destination Port Proto SA(Address/Proto/Type/Direction) 192.168.0/24 0 10.0.50/24 0 0 777.777.84.226/50/use/in 10.0.50/24 0 192.168.0/24 0 0 777.777.84.226/50/require/out

#HILLS IFCONFIG -A
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33224
       inet 127.0.0.1 netmask 0xff000000
       inet6 ::1 prefixlen 128
       inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6
fxp0: flags=8803<UP,BROADCAST,SIMPLEX,MULTICAST> mtu 1500
       address: 00:02:a5:fe:d0:d1
       media: Ethernet autoselect (10baseT)
       status: active
       inet 192.168.0.5 netmask 0xffffff00 broadcast 192.168.0.255
       inet6 fe80::202:a5ff:fefe:d0d1%fxp0 prefixlen 64 scopeid 0x1
rl0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
       address: 00:10:b5:ef:dc:85
       media: Ethernet autoselect (100baseTX full-duplex)
       status: active
       inet 777.777.84.226 netmask 0xfffffff8 broadcast 777.777.84.231
       inet6 fe80::210:b5ff:feef:dc85%rl0 prefixlen 64 scopeid 0x2
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33224
pfsync0: flags=0<> mtu 2020
enc0: flags=0<> mtu 1536

#MINCH IFCONFIG -A
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> mtu 33224
       inet 127.0.0.1 netmask 0xff000000
       inet6 ::1 prefixlen 128
       inet6 fe80::1%lo0 prefixlen 64 scopeid 0x6
fxp0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
       address: 00:50:8b:e8:7a:48
       media: Ethernet autoselect (none)
       status: no carrier
       inet 10.0.50.1 netmask 0xffffff00 broadcast 10.0.50.255
       inet6 fe80::250:8bff:fee8:7a48%fxp0 prefixlen 64 scopeid 0x1
fxp1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
       address: 00:d0:b7:c8:c7:7c
       media: Ethernet autoselect (100baseTX full-duplex)
       status: active
       inet 666.666.192.45 netmask 0xfffffff0 broadcast 666.666.192.47
       inet6 fe80::2d0:b7ff:fec8:c77c%fxp1 prefixlen 64 scopeid 0x2
pflog0: flags=141<UP,RUNNING,PROMISC> mtu 33224
pfsync0: flags=0<> mtu 2020
enc0: flags=0<> mtu 1536

#HILLS DMESG OpenBSD 3.6 (GENERIC) #59: Fri Sep 17 12:32:57 MDT 2004 deraadt_(_at_)_i386_(_dot_)_openbsd_(_dot_)_org:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III ("GenuineIntel" 686-class, 128KB L2 cache) 1 GHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE real mem = 132620288 (129512K) avail mem = 114380800 (111700K) using 1644 buffers containing 6733824 bytes (6576K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+(5e) BIOS, date 09/20/01, BIOS32 rev. 0 @ 0xe7300 apm0 at bios0: Power Management spec V1.2 apm0: AC on, battery charge unknown pcibios0 at bios0: rev 2.1 @ 0xe7300/0x8d00 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf6890/192 (10 entries) pcibios0: PCI Interrupt Router at 000:31:0 ("Intel 82801BA LPC" rev 0x00) pcibios0: PCI bus #1 is the last bus bios0: ROM list: 0xc0000/0x8000 0xe0000/0x10000! cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 "Intel 82815 Hub" rev 0x04 vga1 at pci0 dev 2 function 0 "Intel 82815 Graphics" rev 0x04: aperture at 0x44000000, size 0x4000000 wsdisplay0 at vga1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) ppb0 at pci0 dev 30 function 0 "Intel 82801BA AGP" rev 0x02 pci1 at ppb0 bus 1 fxp0 at pci1 dev 8 function 0 "Intel 82562" rev 0x01: irq 5, address 00:02:a5:fe:d0:d1 inphy0 at fxp0 phy 1: i82562EM 10/100 media interface, rev. 0 rl0 at pci1 dev 9 function 0 "Accton MPX 5030/5038" rev 0x10: irq 10 address 00:10:b5:ef:dc:85 rlphy0 at rl0 phy 0: RTL internal phy ichpcib0 at pci0 dev 31 function 0 "Intel 82801BA LPC" rev 0x02 pciide0 at pci0 dev 31 function 1 "Intel 82801BA IDE" rev 0x02: DMA, channel 0 wired to compatibility, channel 1 wired to compatibility wd0 at pciide0 channel 0 drive 0: <ST320011A> wd0: 16-sector PIO, LBA, 19092MB, 39102336 sectors wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5 atapiscsi0 at pciide0 channel 1 drive 0 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: <COMPAQ, DVD-ROM GDR8160B, 0012> SCSI0 5/cdrom removable cd0(pciide0:1:0): using PIO mode 4, Ultra-DMA mode 3 uhci0 at pci0 dev 31 function 4 "Intel 82801BA USB2" rev 0x02: irq 10 usb0 at uhci0: USB revision 1.0 uhub0 at usb0 uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered auich0 at pci0 dev 31 function 5 "Intel 82801BA AC97" rev 0x02: irq 5, ICH2 AC97 ac97: codec id 0x41445360 (Analog Devices AD1885) ac97: codec features headphone, Analog Devices Phat Stereo audio0 at auich0 isa0 at ichpcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pcppi0 at isa0 port 0x61 midi0 at pcppi0: <PC speaker> sysbeep0 at pcppi0 lpt0 at isa0 port 0x378/4 irq 7 npx0 at isa0 port 0xf0/16: using exception 16 pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo fdc0 at isa0 port 0x3f0/6 irq 6 drq 2 fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec biomask ff45 netmask ff65 ttymask ffe7 pctr: 686-class user-level performance counters enabled mtrr: Pentium Pro MTRR support dkcsum: wd0 matched BIOS disk 80 root on wd0a rootdev=0x0 rrootdev=0x300 rawdev=0x302 uhidev0 at uhub0 port 2 configuration 1 interface 0 uhidev0: Logitech USB-PS/2 Mouse, rev 1.00/1.20, addr 2, iclass 3/1 ums0 at uhidev0: 3 buttons wsmouse0 at ums0 mux 0

#MINCH DMESG OpenBSD 3.6 (GENERIC) #59: Fri Sep 17 12:32:57 MDT 2004 deraadt_(_at_)_i386_(_dot_)_openbsd_(_dot_)_org:/usr/src/sys/arch/i386/compile/GENERIC cpu0: Intel Pentium III ("GenuineIntel" 686-class) 927 MHz cpu0: FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,MMX,FXSR,SSE real mem = 268017664 (261736K) avail mem = 237674496 (232104K) using 3297 buffers containing 13504512 bytes (13188K) of memory mainbus0 (root) bios0 at mainbus0: AT/286+(76) BIOS, date 12/31/99, BIOS32 rev. 0 @ 0xeca00 pcibios0 at bios0: rev 2.1 @ 0xeca00/0x3600 pcibios0: PCI IRQ Routing Table rev 1.0 @ 0xf70f0/144 (7 entries) pcibios0: PCI Interrupt Router at 000:15:0 ("ServerWorks ROSB4 SouthBridge" rev 0x00) pcibios0: PCI bus #1 is the last bus bios0: ROM list: 0xc0000/0x8000 0xc8000/0x8000 0xd0000/0x1000 0xd1000/0x1600! 0xe8000/0x8000! cpu0 at mainbus0 pci0 at mainbus0 bus 0: configuration mode 1 (no bios) pchb0 at pci0 dev 0 function 0 "ServerWorks CNB20LE Host" rev 0x05 pchb1 at pci0 dev 0 function 1 "ServerWorks CNB20LE Host" rev 0x05 pci1 at pchb1 bus 5 ppb0 at pci0 dev 1 function 0 "DEC 21152 PCI-PCI" rev 0x03 pci2 at ppb0 bus 1 fxp0 at pci2 dev 5 function 0 "Intel 82557" rev 0x08: irq 11, address 00:50:8b:e8:7a:48 inphy0 at fxp0 phy 1: i82555 10/100 media interface, rev. 4 vga1 at pci2 dev 6 function 0 "ATI Rage XL" rev 0x27 wsdisplay0 at vga1: console (80x25, vt100 emulation) wsdisplay0: screen 1-5 added (80x25, vt100 emulation) "Compaq Netelligent ASMC" rev 0x00 at pci2 dev 7 function 0 not configured pciide0 at pci2 dev 8 function 0 "CMD Technology PCI0649" rev 0x02: DMA, channel 0 configured to native-PCI, channel 1 configured to native-PCI pciide0: using irq 15 for native-PCI interrupt wd0 at pciide0 channel 0 drive 0: <Maxtor 5T020H2> wd0: 16-sector PIO, LBA, 19092MB, 39102336 sectors wd0(pciide0:0:0): using PIO mode 4, Ultra-DMA mode 5 pciide0: channel 1 disabled (no drives) fxp1 at pci0 dev 3 function 0 "Intel 82557" rev 0x08: irq 10, address 00:d0:b7:c8:c7:7c inphy1 at fxp1 phy 1: i82555 10/100 media interface, rev. 4 pcib0 at pci0 dev 15 function 0 "ServerWorks ROSB4 SouthBridge" rev 0x51 pciide1 at pci0 dev 15 function 1 "ServerWorks OSB4 IDE" rev 0x00: DMA atapiscsi0 at pciide1 channel 0 drive 0 scsibus0 at atapiscsi0: 2 targets cd0 at scsibus0 targ 0 lun 0: <COMPAQ, CRD-8402B, 1.03> SCSI0 5/cdrom removable cd0(pciide1:0:0): using PIO mode 4, DMA mode 2 pciide1: no compatibility interrupt for use by channel 1 ohci0 at pci0 dev 15 function 2 "ServerWorks OSB4/CSB5 USB" rev 0x04: irq 5, version 1.0, legacy support usb0 at ohci0: USB revision 1.0 uhub0 at usb0 uhub0: ServerWorks OHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 4 ports with 4 removable, self powered isa0 at pcib0 isadma0 at isa0 pckbc0 at isa0 port 0x60/5 pckbd0 at pckbc0 (kbd slot) pckbc0: using irq 1 for kbd slot wskbd0 at pckbd0: console keyboard, using wsdisplay0 pmsi0 at pckbc0 (aux slot) pckbc0: using irq 12 for aux slot wsmouse0 at pmsi0 mux 0 pcppi0 at isa0 port 0x61 midi0 at pcppi0: <PC speaker> sysbeep0 at pcppi0 lpt0 at isa0 port 0x378/4 irq 7 npx0 at isa0 port 0xf0/16: using exception 16 pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo pccom1 at isa0 port 0x2f8/8 irq 3: ns16550a, 16 byte fifo fdc0 at isa0 port 0x3f0/6 irq 6 drq 2 fd0 at fdc0 drive 0: 1.44MB 80 cyl, 2 head, 18 sec biomask e365 netmask ef65 ttymask ffe7 pctr: 686-class user-level performance counters enabled mtrr: Pentium Pro MTRR support dkcsum: wd0 matched BIOS disk 80 root on wd0a rootdev=0x0 rrootdev=0x300 rawdev=0x302

Follow-Ups:
- Re: VPN ISAKMPD
  - From: Waldemar Brodkorb

References:
- VPN ISAKMPD
  - From: Steve Murdoch

Prev by Date: Re: Location of aliases file when using Sendmail versus Postfix
Next by Date: Inode density - newfs(8)
Previous by thread: VPN ISAKMPD
Next by thread: Re: VPN ISAKMPD
Index(es):
- Date
- Thread

Visit your host, monkey.org