Re: Fast IPSEC issue



On Fri, Apr 28, 2006 at 10:57:48AM -0400, Stephen Clark wrote:
Apr 28 10:44:48 J301001 kernel: gre45: gre_output: recursively called
too many times(2)

This means a packet was fed into if_gre while if_gre was also active.
In the case of FAST_IPSEC this may be normal if you have packets moving
between tunnels. You can change how many levels of recursive call
are permitted by changing the sysctl:

net.link.gre.max_nesting

Try making it slightly larger and see if the messages stop.

David.
_______________________________________________
freebsd-stable@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-stable
To unsubscribe, send any mail to "freebsd-stable-unsubscribe@xxxxxxxxxxx"



Relevant Pages

  • MPD+L2TP?
    ... Has anyone successfully used MPD/L2TP? ... Are there any known limitations? ... I was hoping to achieve around 8000 tunnels with an average of 0.7 packet per second. ...
    (freebsd-isp)
  • Re: sendfile(2) SF_NOPUSH flag proposal
    ... :Bill Fenner wrote: ... :If the file is larger than `sysctl net.inet.tcp.sendspace`, ... unconditionally hold off a flush. ... This section does all tests related to sending a packet and as you can ...
    (freebsd-arch)
  • Re: non-random IP IDs
    ... >> I'm afraid I don't have time to look at this right now. ... >> can be revisited (the sysctl defaults to off for now), ... > You're confusing properties of the local number and some opaque bits in ... > a packet being sent over the 'net. ...
    (FreeBSD-Security)