<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<STYLE type=text/css>@import url( C:\Documents and Settings\IBM\Local Settings\Temporary Internet Files\scrollbar.css );
</STYLE>
<META http-equiv=Content-Type content="text/html; charset=gb2312">
<META content="MSHTML 6.00.6000.16981" name=GENERATOR><LINK
href="BLOCKQUOTE{margin-Top: 0px; margin-Bottom: 0px; margin-Left: 2em}"
rel=stylesheet></HEAD>
<BODY style="FONT-SIZE: 10pt; MARGIN: 10px; FONT-FAMILY: verdana">
<DIV><FONT face=Verdana size=2>hello,everyone:</FONT></DIV>
<DIV style="TEXT-INDENT: 2em"> </DIV>
<DIV style="TEXT-INDENT: 2em"> </DIV>
<DIV style="TEXT-INDENT: 2em"> </DIV>
<DIV style="TEXT-INDENT: 2em">I have got a problem,as follows</DIV>
<DIV style="TEXT-INDENT: 2em"> </DIV>
<DIV style="TEXT-INDENT: 2em"> </DIV>
<DIV>
<DIV>
<DIV><FONT
color=#ff0000>bwb ipsec # ipsec verify</FONT></DIV>
<DIV>Checking your system to see if IPsec got installed and started correctly:</DIV>
<DIV>Version check and ipsec on-path [OK]</DIV>
<DIV>Linux Openswan U2.6.24/K2.6.26 (netkey)</DIV>
<DIV>Checking for IPsec support in kernel [OK]</DIV>
<DIV>NETKEY detected, testing for disabled ICMP send_redirects [OK]</DIV>
<DIV>NETKEY detected, testing for disabled ICMP accept_redirects [OK]</DIV>
<DIV>Checking for RSA private key (/etc/ipsec.secrets) [OK]</DIV>
<DIV>Checking that pluto is running [OK]</DIV>
<DIV>Pluto listening for IKE on udp 500 [OK]</DIV>
<DIV>Pluto listening for NAT-T on udp 4500 [FAILED]</DIV>
<DIV>Two or more interfaces found, checking IP forwarding [FAILED]</DIV>
<DIV>Checking NAT and MASQUERADEing [OK]</DIV>
<DIV>Checking for 'ip' command [OK]</DIV>
<DIV>Checking for 'iptables' command [OK]</DIV></DIV>
<DIV> </DIV>
<DIV> </DIV></DIV>
<DIV><FONT color=#ff0000>the error logs:</FONT></DIV>
<DIV>
<DIV>104 "adf" #1: STATE_MAIN_I1: initiate</DIV>
<DIV>003 "adf" #1: ignoring unknown Vendor ID payload [4f454e7c454d716b5f4d6c67]</DIV>
<DIV>003 "adf" #1: received Vendor ID payload [Dead Peer Detection]</DIV>
<DIV>106 "adf" #1: STATE_MAIN_I2: sent MI2, expecting MR2</DIV>
<DIV>108 "adf" #1: STATE_MAIN_I3: sent MI3, expecting MR3</DIV>
<DIV>004 "adf" #1: STATE_MAIN_I4: ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_md5 group=modp1024}</DIV>
<DIV>117 "adf" #2: STATE_QUICK_I1: initiate</DIV>
<DIV>003 "adf" #2: ERROR: netlink response for Add SA esp.6fea136c@192.168.12.33 included errno 93: Protocol not supported</DIV>
<DIV>032 "adf" #2: STATE_QUICK_I1: internal error</DIV>
<DIV> </DIV>
<DIV><PRE><I><FONT color=#ff0000>the logs from startup to failure is in the attachment.</FONT></I></PRE></DIV>
<DIV> </DIV>
<DIV> </DIV><I></I></DIV>
<DIV><I>
<DIV> </DIV>
<DIV> </DIV>
<DIV> <BR></DIV></I>
<DIV>t</DIV>
<DIV> </DIV></DIV>
<DIV> </DIV>
<DIV><FONT face=Verdana size=2></FONT> </DIV>
<DIV align=left><FONT face=Verdana color=#c0c0c0 size=2>2010-03-26
</FONT></DIV><FONT face=Verdana size=2>
<HR style="WIDTH: 122px; HEIGHT: 2px" align=left SIZE=2>
<DIV><FONT face=Verdana color=#c0c0c0 size=2><SPAN>tianma217</SPAN>
</FONT></DIV></FONT></BODY></HTML>