IPsec associations on SFOS 23's coprocessor software: refused, then taken, 2026-10-25
Found while starting on discovery 14 (IPsec state kept in step):
on the first XGS 3300, whose coprocessor runs SFOS 23 EAP 1's software, no association had been
offloaded since it came back to OPNsense. Its lab tunnel to the second XGS 3300 - the PC's network
to the first board's own address, IKEv2, AES-GCM-256 - ran in the kernel's cipher, and the driver
said why at every install: the coprocessor refused the association, rc 1, SP2FP_RC_INVALID_PARAMETER.
The whole page, with how it was taken and what it does not show: IPsec associations on SFOS 23's coprocessor software: refused, then taken, 2026-10-25.
The discussion of this page is held in the project's GitHub Discussions. Showing it here loads giscus from giscus.app and GitHub, and writing in it needs a GitHub account - what that means.