/sbin/setkey not working

[rupapv]

Hi,

I am using a FreeBSD 13.1 vmware image but having a hard time getting a simple setkey command to work. setkey gives "Invalid argument" to even the examples given in the man page - https://man.freebsd.org/cgi/man.cgi?query=setkey&sektion=8&manpath=FreeBSD+13.1-RELEASE+and+Ports

root@freebsd-13:~ # /sbin/setkey -c
add 10.0.0.2 10.0.0.1 esp 15701 -E aes-gcm-16 0x4be7a0195c7abd15e6d28715944764f009d8daab;
The result of line 1: Invalid argument.
^C
root@freebsd-13:~ #

The same happens with every esp and ah algorithm in the man page.
I have run out of options to try. According to the documentation, IPSec is enabled by default in 13.1 version. Then why can't a simple setkey command work ? Is there anything more that I have to enable ? I suspect it is because I am using a vm, but it didn't work even after I set the sysctl variable kern.crypto.allow_soft =1, just in case setkey is expecting hardware support to do crypto.

I will great if I can get some help on this.

Thanks,
Rupa.

 

[rupapv]

This issue doesnt happen in Freebsd 13.2. setkey works fine in 13.2.

 

[Kai Burghardt]

The result of line 1: Invalid argument.

From setkey(8) manual’s examples I see there is a blank in front of the semicolon so a guess would be:​

setkey -c << EOT
add 10.0.0.2 10.0.0.1 esp 15701 -E aes-gcm-16 0x4be7a0195c7abd15e6d28715944764f009d8daab ;
EOT