<div>Dear,</div>
<div> </div>
<div>Is there any hints why all packets of ipsec0 getting dropped?<br> </div>
<div>my vpn diagram<br><a onclick="return top.js.OpenExtLink(window,event,this)" href="http://192.168.10.0/24" target="_blank">192.168.10.0/24</a> ---- [eth1 a.b.c.d eth0] ==== internet ==== [eth0 x.y.w.z eth1] ----- <a onclick="return top.js.OpenExtLink(window,event,this)" href="http://192.168.15.0/24" target="_blank">
192.168.15.0/24</a></div>
<div> </div>
<div>/var/log/messages</div>
<div>kernel: klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0.<br>kernel: klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xd78ce2a4 len=60 type=2048 dev=ipsec0->eth0 dev_addr=00:50:fc:3a:17:5c ip=c0a80a75->c0a80f75
<br>kernel: klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=74 hard_header_len:14 00:50:fc:3a:17:5c:00:50:fc:3a:17:5c:08:00 <br>kernel: klips_debug: IP: ihl:20 ver:4 tos:0 tlen:60 id:35201 frag_off:0 ttl:31 proto:1 (ICMP) chk:30469 saddr:
<a href="http://192.168.10.117">192.168.10.117</a> daddr:<a href="http://192.168.15.117">192.168.15.117</a> type:code=8:0<br>kernel: klips_debug:ipsec_findroute: 192.168.10.117:0-><a href="http://192.168.15.117:0">192.168.15.117:0
</a> 1<br>kernel: klips_debug:rj_match: * See if we match exactly as a host destination<br>kernel: klips_debug:rj_match: ** try to match a leaf, t=0xcf1cbc80<br>kernel: klips_debug:rj_match: *** start searching up the tree, t=0xcf1cbc80
<br>kernel: klips_debug:rj_match: **** t=0xcf1cbc98<br>kernel: klips_debug:rj_match: **** t=0xcc8957c0<br>kernel: klips_debug:rj_match: ***** cp2=0xdd9cfd28 cp3=0xc5f76230<br>kernel: klips_debug:rj_match: ***** not found.
<br>kernel: klips_debug:ipsec_tunnel_start_xmit: checking for local udp/500 IKE packet saddr=c0a80a75, er=00000000, daddr=c0a80f75, er_dst=0, proto=1 sport=0 dport=0<br>kernel: klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 18,36
<br>kernel: klips_debug:ipsec_tunnel_start_xmit: shunt SA of DROP or no eroute: dropping.</div>
<div><br>Regards,</div>
<div>Steve Jong</div>