[OpenAFS] client hangs through ipsec

[Wes Chow]

I should mention that in this setup, the two IPsec gateways are on the
same subnet:

> This is a "tcpdump port 7000" on the client machine:
> 
> 21:48:07.671387 IP confucius.ho.in.athenacr.com.afs3-callback >
> helmsley.dev.in.athenacr.com.afs3-fileserver:  rx ack first 38 serial
> 0 reason delay (65)
> 21:48:07.739039 IP helmsley.dev.in.athenacr.com.afs3-fileserver >
> confucius.ho.in.athenacr.com.afs3-callback:  rx data (1436)
> 21:48:07.739051 IP confucius.ho.in.athenacr.com.afs3-callback >
> helmsley.dev.in.athenacr.com.afs3-fileserver:  rx ack first 38 serial
> 65 reason ack requested acked 637534208 (66)
> 21:48:07.742036 IP helmsley.dev.in.athenacr.com.afs3-fileserver >
> confucius.ho.in.athenacr.com.afs3-callback:  rx data (1436)
> 21:48:07.742050 IP confucius.ho.in.athenacr.com.afs3-callback >
> helmsley.dev.in.athenacr.com.afs3-fileserver:  rx ack first 39 serial
> 66 reason ack requested acked 654311424 (66)
> 21:48:08.119058 IP helmsley.dev.in.athenacr.com.afs3-fileserver >
> confucius.ho.in.athenacr.com.afs3-callback:  rx data (1436)
> 21:48:08.119075 IP confucius.ho.in.athenacr.com.afs3-callback >
> helmsley.dev.in.athenacr.com.afs3-fileserver:  rx ack first 40 serial
> 69 reason ack requested acked 671088640 (66)
> 21:48:08.122055 IP helmsley.dev.in.athenacr.com.afs3-fileserver >
> confucius.ho.in.athenacr.com.afs3-callback:  rx data (1436)


And in this setup, the IPsec gateways are separated by an unknown
number of routers:

> 21:56:07.912736 IP berra.ho.in.athenacr.com.afs3-callback >
> hippo.dev.in.athenacr.com.afs3-fileserver:  rx ack first 1 serial 0
> reason ping (65)
> 21:56:07.915493 IP hippo.dev.in.athenacr.com.afs3-fileserver >
> berra.ho.in.athenacr.com.afs3-callback:  rx ack first 2 serial 8
> reason ping response (65)
> 21:56:16.072313 IP berra.ho.in.athenacr.com.afs3-callback >
> hippo.dev.in.athenacr.com.afs3-fileserver:  rx ack first 1 serial 0
> reason ping (65)
> 21:56:16.074425 IP hippo.dev.in.athenacr.com.afs3-fileserver >
> berra.ho.in.athenacr.com.afs3-callback:  rx ack first 2 serial 9
> reason ping response (65)
> 21:56:21.608237 IP hippo.dev.in.athenacr.com.afs3-fileserver >
> berra.ho.in.athenacr.com.afs3-callback:  rx ack first 2 serial 0
> reason ping (65)
> 21:56:21.608286 IP berra.ho.in.athenacr.com.afs3-callback >
> hippo.dev.in.athenacr.com.afs3-fileserver:  rx ack first 1 serial 13
> reason ping response (65)
> 21:56:31.637632 IP hippo.dev.in.athenacr.com.afs3-fileserver >
> berra.ho.in.athenacr.com.afs3-callback:  rx ack first 2 serial 0
> reason ping (65)
> 21:56:31.637651 IP berra.ho.in.athenacr.com.afs3-callback >
> hippo.dev.in.athenacr.com.afs3-fileserver:  rx ack first 1 serial 15
> reason ping response (65)


-- 
http://www.woahnelly.net/~wes/          OpenPGP key = 0xA5CA6644
fingerprint = FDE5 21D8 9D8B 386F 128F  DF52 3F52 D582 A5CA 6644