Hi,  
  
I use linux 2.6.9 native ipsec with racoon as IKE.  
I need to communicate with a Windows machine in transport mode, which is using both  
AH (MD5) and  ESP (md5 for authentification, 3DES for encryption).  
  
The problem is that I can't manage to communicate with it when it is configured to  
use both ESP and AH authentification. IKE part seems ok, I get ISAKMP-SA and 
IPsec-SA.. 
  
I use the following setkey:   
  
--  
#!/sbin/setkey -f  
flush;  
spdflush;  
  
spdadd myip windowsip any -P out ipsec  
        esp/transport//required  
        ah/transport//required;  
  
spdadd windowsip myip any -P in ipsec  
        esp/transport//required  
        ah/transport//required;  
--  
  
If I setup the windows machine and uncheck either the AH or the ESP checkbox (and 
remove  
the relevant line in my setkey.conf), everything works fine. But in this 
configuration, I get ISAKMP-SA ok, and when I try to make traffic I get a lot of 
IPSec-SA etablished, either for ESP or AH and then purged almost immediately. 
As a result, I can't even ping one host from the other. 
 
I have tried "complex_bundle on" in racoon (I've not exactly understood what it was 
for). 
 
Thanks