<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Tahoma","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Tahoma","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=RO link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>Hi all,<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>I have installed 2 box – slackware 12.0<o:p></o:p></p>
<p class=MsoNormal>+ kernel 2.6.18.7 + openswan-klips patch<o:p></o:p></p>
<p class=MsoNormal>and openswan 2.4.9<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>I have configured 1 tunnel left-right to <o:p></o:p></p>
<p class=MsoNormal>connect 2 subnets LAN1[ 192.168.10.0/24]<o:p></o:p></p>
<p class=MsoNormal>and LAN2[192.168.20.0/24].<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>When I start ipsec on both servers the tunnel goes UP<o:p></o:p></p>
<p class=MsoNormal>I can ping the LAN1 iface from the right server:<o:p></o:p></p>
<p class=MsoNormal style='margin-left:35.4pt'><i><span style='color:red'>ping
192.168.20.1 -I 192.168.10.1<o:p></o:p></span></i></p>
<p class=MsoNormal style='margin-left:35.4pt'>PING 192.168.20.1 (192.168.20.1)
from 192.168.10.1 : 56(84) bytes of data.<o:p></o:p></p>
<p class=MsoNormal style='margin-left:35.4pt'>64 bytes from 192.168.20.1:
icmp_seq=1 ttl=64 time=8.52 ms<o:p></o:p></p>
<p class=MsoNormal style='margin-left:35.4pt'>64 bytes from 192.168.20.1:
icmp_seq=2 ttl=64 time=0.667 ms<o:p></o:p></p>
<p class=MsoNormal style='margin-left:35.4pt'>64 bytes from 192.168.20.1:
icmp_seq=3 ttl=64 time=0.639 ms<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal style='margin-left:35.4pt'>--- 192.168.20.1 ping statistics
---<o:p></o:p></p>
<p class=MsoNormal style='margin-left:35.4pt'>3 packets transmitted, 3
received, 0% packet loss, time 2007ms<o:p></o:p></p>
<p class=MsoNormal style='margin-left:35.4pt'>rtt min/avg/max/mdev =
0.639/3.275/8.520/3.708 ms<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>and LAN2 from left server:<o:p></o:p></p>
<p class=MsoNormal style='margin-left:35.4pt'><i><span style='color:red'>ping
192.168.10.1 -I 192.168.20.1<o:p></o:p></span></i></p>
<p class=MsoNormal style='margin-left:35.4pt'>PING 192.168.10.1 (192.168.10.1)
from 192.168.20.1 : 56(84) bytes of data.<o:p></o:p></p>
<p class=MsoNormal style='margin-left:35.4pt'>64 bytes from 192.168.10.1:
icmp_seq=1 ttl=64 time=0.249 ms<o:p></o:p></p>
<p class=MsoNormal style='margin-left:35.4pt'>64 bytes from 192.168.10.1:
icmp_seq=2 ttl=64 time=0.673 ms<o:p></o:p></p>
<p class=MsoNormal style='margin-left:35.4pt'>64 bytes from 192.168.10.1:
icmp_seq=3 ttl=64 time=0.598 ms<o:p></o:p></p>
<p class=MsoNormal style='margin-left:35.4pt'><o:p> </o:p></p>
<p class=MsoNormal style='margin-left:35.4pt'>--- 192.168.10.1 ping statistics
---<o:p></o:p></p>
<p class=MsoNormal style='margin-left:35.4pt'>3 packets transmitted, 3
received, 0% packet loss, time 1998ms<o:p></o:p></p>
<p class=MsoNormal style='margin-left:35.4pt'>rtt min/avg/max/mdev =
0.249/0.506/0.673/0.186 ms<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>It seems that the tunnel is UP and functional, I can see
icmp request and icmp reply packets<o:p></o:p></p>
<p class=MsoNormal>with tcpdump on ipsec0 iface.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>AND NOW the question ... <o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>
WHY THE LOG LOOKS LIKE THAT ...<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Aug 22 18:47:55 client ipsec_setup: KLIPS ipsec0 on eth1
xxx.yyy.zzz.qqq/255.255.255.240 broadcast xxx.yyy.zzz.kkk<o:p></o:p></p>
<p class=MsoNormal>Aug 22 18:47:55 client ipsec_setup: ...Openswan IPsec
started<o:p></o:p></p>
<p class=MsoNormal>Aug 22 18:47:55 client ipsec_setup: Starting Openswan IPsec
2.4.9...<o:p></o:p></p>
<p class=MsoNormal>Aug 22 18:47:55 client ipsec__plutorun: 104
"left-right" #1: STATE_MAIN_I1: initiate<o:p></o:p></p>
<p class=MsoNormal><b><span style='color:red'>Aug 22 18:47:55 client
ipsec__plutorun: ...could not start conn "left-right"<o:p></o:p></span></b></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span lang=EN-US>Toni Cosma<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>administrator sistem<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>--<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>ATP Exodus SRL<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Sub Dura 4-5<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>RO - 437229 Sasar – Baia Mare<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Tel : +40 262 218342<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Fax : +40 262 275457<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>E-mail: <a
href="mailto:toni.cosma@atp-exodus.ro"><span style='color:blue'>toni.cosma@atp-exodus.ro</span></a><o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Web: <a
href="http://www.atp-exodus.ro"><span style='color:blue'>www.atp-exodus.ro</span></a><o:p></o:p></span></p>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</body>
</html>