On Thu, Sep 03, 2009 at 04:42:29PM +0300, Miika Komu wrote: > do you have the BEET module? What's the kernel version? Linux kernel is 2.6.28.10, as stated in the initial mail. I have xfrm{4,6}_mode_beet loaded. Since the OpenWrt-Version of HIPL doesn't automatically load the required modules (no modprobe available), a module may be missing. I've attached the output of lsmod. $ lsmod xfrm4_mode_beet 1536 0 xfrm6_mode_beet 1312 0 ip6t_REJECT 2752 0 ip6t_LOG 5952 0 ip6t_rt 1824 0 ip6t_hbh 1440 0 ip6t_mh 800 0 ip6t_ipv6header 1152 0 ip6t_frag 1024 0 ip6t_eui64 832 0 ip6t_ah 960 0 ip6table_raw 640 0 ip6_queue 4352 0 ip6table_mangle 1024 0 ip6table_filter 768 0 ip6_tables 9872 9 ip6t_LOG,ip6t_rt,ip6t_hbh,ip6t_ipv6header,ip6t_frag,ip6t_ah,ip6table_raw,ip6table_mangle,ip6table_filter nf_conntrack_ipv6 10768 0 nfnetlink_log 6896 0 ip_queue 4320 0 nf_nat_tftp 480 0 nf_conntrack_tftp 2512 1 nf_nat_tftp nf_nat_irc 960 0 nf_conntrack_irc 3008 1 nf_nat_irc nf_nat_ftp 1504 0 nf_conntrack_ftp 5248 1 nf_nat_ftp xt_policy 2304 0 xt_esp 992 0 ipt_ah 864 0 xt_string 960 0 xt_layer7 10064 0 ipt_MASQUERADE 1184 0 iptable_nat 3344 0 nf_nat 12448 5 nf_nat_tftp,nf_nat_irc,nf_nat_ftp,ipt_MASQUERADE,iptable_nat xt_NOTRACK 704 0 iptable_raw 800 0 xt_state 864 0 nf_conntrack_ipv4 8064 3 iptable_nat,nf_nat nf_defrag_ipv4 672 1 nf_conntrack_ipv4 nf_conntrack 42592 14 nf_conntrack_ipv6,nf_nat_tftp,nf_conntrack_tftp,nf_nat_irc,nf_conntrack_irc,nf_nat_ftp,nf_conntrack_ftp,xt_layer7,ipt_MASQUERADE,iptable_nat,nf_nat,xt_NOTRACK,xt_state,nf_conntrack_ipv4 ipt_REJECT 2048 0 xt_TCPMSS 2880 0 ipt_LOG 4896 0 xt_multiport 2080 0 xt_mac 608 0 xt_limit 1184 0 iptable_mangle 1120 0 iptable_filter 928 0 ip_tables 9232 4 iptable_nat,iptable_raw,iptable_mangle,iptable_filter xt_tcpudp 2112 0 x_tables 9232 27 ip6t_REJECT,ip6t_LOG,ip6t_rt,ip6t_hbh,ip6t_mh,ip6t_ipv6header,ip6t_frag,ip6t_eui64,ip6t_ah,ip6_tables,xt_policy,xt_esp,ipt_ah,xt_string,xt_layer7,ipt_MASQUERADE,iptable_nat,xt_NOTRACK,xt_state,ipt_REJECT,xt_TCPMSS,ipt_LOG,xt_multiport,xt_mac,xt_limit,ip_tables,xt_tcpudp xfrm6_tunnel 4368 0 esp6 4480 0 ah6 4032 0 xfrm4_tunnel 1120 0 esp4 4608 0 ah4 3328 0 xfrm_user 17728 1 af_key 27600 0 sit 9296 0 ipip 7696 0 ip6_tunnel 13008 0 tunnel6 1744 2 xfrm6_tunnel,ip6_tunnel tunnel4 1840 3 xfrm4_tunnel,sit,ipip tun 8848 0 ppp_async 9088 0 ppp_generic 22144 1 ppp_async slhc 5440 1 ppp_generic nbd 7952 0 loop 10160 0 ath5k 120080 0 ath 6688 1 ath5k ts_fsm 2720 0 ts_bm 1536 0 ts_kmp 1568 0 mac80211 195600 1 ath5k cfg80211 79424 3 ath5k,ath,mac80211 ipv6 292224 39 xfrm6_mode_beet,ip6t_REJECT,ip6_queue,ip6table_mangle,nf_conntrack_ipv6,xfrm6_tunnel,esp6,ah6,sit,ip6_tunnel,tunnel6 crc_ccitt 1024 1 ppp_async sha1_generic 1504 0 crypto_null 1632 0 md5 4416 0 hmac 2848 0 des_generic 18752 0 authenc 3808 0 arc4 864 2 aes_generic 28880 0 deflate 1440 0 ecb 1376 2 cbc 2112 0 cryptomgr 71088 0 crypto_hash 2560 2 hmac,authenc crypto_blkcipher 7600 5 crypto_null,authenc,ecb,cbc,cryptomgr aead 3712 4 esp6,esp4,authenc,cryptomgr crypto_algapi 9824 14 sha1_generic,crypto_null,md5,hmac,des_generic,authenc,arc4,aes_generic,deflate,ecb,cbc,cryptomgr,crypto_blkcipher,aead switch_robo 4128 0 switch_core 5408 1 switch_robo diag 7568 0 -- Thomas Jansen, "Mithi" --- mithi@xxxxxxxxx GPG 9D5C682B, feel free to sign or encrypt your mail