Update: The kldload is not automatically initiated by the strongswan rc
file; this is an obvious omission since GENERIC now includes only a stub
and the actual ipsec driver must dynamically loaded. > I'll put a note in "bugzila" on it since the kernel config now requires
you kldload the module or it doesn't work.
Weird that this never came up before.
The enc and IPSEC_NAT_T
declarations are not required and neither is in GENERIC.
IPSEC_NAT_T has apparently been removed because the NAT-T support is
non-optional since FreeBSD 12 (the same merge added the ipsec.ko module
and the IPSEC_SUPPORT option [1]).
Regards,
Tobias
[1]
https://cgit.freebsd.org/src/commit/?id=fcf596178b5f2be36424ecbc1b6a3224b29c91d2
