hifn crypto card problems

[Andrew Campbell <andrew_(_at_)_etunnels_(_dot_)_com>]

Hi there,

I have been running into problems using ipsec with a Hi/fn crypto card.
I set up a simple test vpn using esp with 3des encryption.  Incoming esp
traffic is never delivered -- it is seen on fxp0, but the decrypted
packet is never seen on enc0.  Outgoing esp traffic is seen on enc0
before encryption, but then it never appears on fxp0.

If I disable the card on boot using boot -c, then ipsec works without a
hitch.

Just wondering if anyone else has had problems with the hifn - any
suggestions on how to solve are very welcome :)      I should note that
I'm running a custom configured kernel, dmesg below.

Thanks for your help,
Andrew

--
Andrew Campbell
andrew_(_at_)_etunnels_(_dot_)_com
(604) 647-1346

===================================================
OpenBSD 2.8-current (GENERIC) #0: Wed Nov 15 07:23:06 PST 2000
    root_(_at_)_sea-svr-10:/var/src/sys/arch/i386/compile/GENERIC
cpu0: Intel Pentium III (Coppermine) ("GenuineIntel" 686-class) 702 MHz
cpu0:
FPU,V86,DE,PSE,TSC,MSR,PAE,MCE,CX8,SYS,MTRR,PGE,MCA,CMOV,PAT,PSE36,SER,MMX,FXSR,SIMD

real mem  = 64598016 (63084K)
avail mem = 44081152 (43048K)
using 4070 buffers containing 16670720 bytes (16280K) of memory
mainbus0 (root)
bios0 at mainbus0: AT/286+(5b) BIOS, date 06/21/00, BIOS32 rev. 0 @
0xfb280
pcibios0 at bios0: rev. 2.1 found at 0xf0000[0xb700]
pcibios0: PCI IRQ Routing Table rev. 1.0 found at 0xfdeb0, size 208
bytes (11 entries)
pcibios0: PCI Interrupt Router at 000:31:0 (vendor 0x8086 product 0x7000
rev 0x00)
pcibios0: PCI Exclusive IRQs: 5 10 11 12
pcibios0: PCI bus #1 is the last bus
pci0 at mainbus0 bus 0: configuration mode 1 (no bios)
pchb0 at pci0 dev 0 function 0 vendor 0x8086 product 0x7124 rev 0x03:
rng active, 9Kb/sec
vendor 0x8086 product 0x7125 (class display, subclass VGA, rev 0x03) at
pci0 dev 1 function 0 not configured
ppb0 at pci0 dev 30 function 0 vendor 0x8086 product 0x2418 rev 0x02
pci1 at ppb0 bus 1
fxp0 at pci1 dev 10 function 0 vendor 0x8086 product 0x1229 rev 0x08:
irq 11, address 00:90:27:38:83:41
inphy0 at fxp0 phy 1: i82555 10/100 media interface, rev. 4
fxp1 at pci1 dev 11 function 0 vendor 0x8086 product 0x1229 rev 0x08:
irq 10, address 00:90:27:38:83:42
inphy1 at fxp1 phy 1: i82555 10/100 media interface, rev. 4
hifn0 at pci1 dev 15 function 0 vendor 0x13a3 product 0x0005 rev 0x01:
fully enabled, 512KB sram, irq 10
pcib0 at pci0 dev 31 function 0 vendor 0x8086 product 0x2410 rev 0x02
pciide0 at pci0 dev 31 function 1 vendor 0x8086 product 0x2411 rev 0x02:
DMA, channel 0 wired to compatibility,
channel 1 wired to compatibility
wd0 at pciide0 channel 0 drive 0: <SanDisk SDP3B-128>
wd0: can use 32-bit, PIO mode 0
wd0: 1-sector PIO, LBA, 122MB, 980 cyl, 8 head, 32 sec, 250880 sectors
pciide0: channel 0 interrupting at irq 14
wd0(pciide0:0:0): using PIO mode 0
vendor 0x8086 product 0x2415 (class multimedia, subclass audio, rev
0x02) at pci0 dev 31 function 5 not
configured
isa0 at pcib0
isadma0 at isa0
npx0 at isa0 port 0xf0/16: using exception 16
pccom0 at isa0 port 0x3f8/8 irq 4: ns16550a, 16 byte fifo
pccom0: console
vt0 at isa0 port 0x60/16 irq 1: vga 80 col, color, 2 scr, mf2-kbd
fdc0 at isa0 port 0x3f0/6 irq 6 drq 2
biomask 4040 netmask 4c40 ttymask 4c42
pctr: 686-class user-level performance counters enabled
mtrr: Pentium Pro MTRR support
dkcsum: wd0 matched BIOS disk 80
root on wd0a
rootdev=0x0 rrootdev=0x300 rawdev=0x302
WARNING: / was not properly unmounted