Bummer. I can't reproduce the problem on the other box either. So I guess, while playing with several ike configurations, I managed to hose the kernel's policy database. Installing setkey (and thereby running /etc/init.d/setkey) probably resolved the mess by flushing all policies. Therefore I thought setkey is needed by ike.
You can close the bug. -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org