<div>Dear all:</div>
<div>I installed openswan 2.4.9 on ARM linux 2.4.19&nbsp; </div>
<div>my config file is as follows:</div>
<div><br>config setup<br>&nbsp;klipsdebug=all<br>&nbsp;plutodebug=all<br>&nbsp;nat_traversal=yes<br>&nbsp;interfaces=&quot;%defaultroute&quot;</div>
<div>
<p>include /etc/ipsec.d/examples/no_oe.conf<br>&nbsp;<br>conn net-to-net<br>&nbsp;left=%defaultroute<br>&nbsp;leftsubnet=<a href="http://192.168.0.0/24">192.168.0.0/24</a><br>&nbsp;leftnexthop=%defaultroute<br>&nbsp;leftcert=/etc/ipsec.d/mycert2.pem
<br>&nbsp;leftrsasigkey=%cert<br>&nbsp;right=<a href="http://211.78.84.93">211.78.84.93</a><br>&nbsp;rightsubnet=<a href="http://10.2.111.0/24">10.2.111.0/24</a><br>&nbsp;rightid=&quot;@<a href="http://SSG550.sti.com.tw">SSG550.sti.com.tw</a>
&quot;<br>&nbsp;rightnexthop=%defaultroute&nbsp;&nbsp;&nbsp; <br>&nbsp;auto=add<br>&nbsp;pfs=no</p></div>
<div>&nbsp;</div>
<div>The error message started :</div>
<div>
<p>------------------------------------------------------------------------------------------------------------------------------<br>pluto[2176]: | command executing up-client</p>
<p>pluto[2176]: |&nbsp;&nbsp; trusted_ca called with a=C=TW, ST=Taiwan, L=Taipei, O=Dawningtech, OU=Support, CN=Dawningtech b=(empty)</p>
<p>pluto[2176]: | executing up-client: 2&gt;&amp;1 PLUTO_VERSION=&#39;1.1&#39; PLUTO_VERB=&#39;up-client&#39; PLUTO_CONNECTION=&#39;net-to-net&#39; PLUTO_NEXT_HOP=&#39;<a href="http://192.168.0.1">192.168.0.1</a>&#39; PLUTO_INTERFACE=&#39;ipsec0&#39; PLUTO_ME=&#39;
<a href="http://192.168.0.200">192.168.0.200</a>&#39; PLUTO_MY_ID=&#39;C=TW, ST=Taiwan, L=Taipei, O=Dawningtech, OU=Support, CN=IPSEC&#39; PLUTO_MY_CLIENT=&#39;<a href="http://192.168.0.0/24">192.168.0.0/24</a>&#39; PLUTO_MY_CLIENT_NET=&#39;
<a href="http://192.168.0.0">192.168.0.0</a>&#39; PLUTO_MY_CLIENT_MASK=&#39;<a href="http://255.255.255.0">255.255.255.0</a>&#39; PLUTO_MY_PORT=&#39;0&#39; PLUTO_MY_PROTOCOL=&#39;0&#39; PLUTO_PEER=&#39;<a href="http://211.78.84.93">
211.78.84.93</a>&#39; <a href="mailto:PLUTO_PEER_ID=&#39;@SSG550.sti.com.tw&#39;">PLUTO_PEER_ID=&#39;@SSG550.sti.com.tw&#39;</a> PLUTO_PEER_CLIENT=&#39;<a href="http://10.2.111.0/24">10.2.111.0/24</a>&#39; PLUTO_PEER_CLIENT_NET=&#39;
<a href="http://10.2.111.0">10.2.111.0</a>&#39; PLUTO_PEER_CLIENT_MASK=&#39;<a href="http://255.255.255.0">255.255.255.0</a>&#39; PLUTO_PEER_PORT=&#39;0&#39; PLUTO_PEER_PROTOCOL=&#39;0&#39; PLUTO_PEER_CA=&#39;C=TW, ST=Taiwan, L=Taipei, O=Dawningtech, OU=Support, CN=Dawningtech&#39; PLUTO_CONN_POLICY=&#39;RSASIG+ENCRYPT+TUNNEL+UP&#39;&nbsp;&nbsp; ipsec _updown
</p>
<p>pluto[2176]: &quot;net-to-net&quot; #2: up-client output: ip: an inet address is expected rather than &quot;cache&quot;.</p>
<p>pluto[2176]: &quot;net-to-net&quot; #2: up-client command exited with status 1</p>
<p>pluto[2176]: | route_and_eroute: firewall_notified: false</p>
<p>pluto[2176]: | eroute_connection delete eroute <a href="http://192.168.0.0/24:0">192.168.0.0/24:0</a> --0-&gt; <a href="http://10.2.111.0/24:0">10.2.111.0/24:0</a> =&gt; <a href="mailto:tun.1002@211.78.84.93">tun.1002@211.78.84.93
</a> (raw_eroute)</p>
<p>..............................................</p>
<p><br>003 &quot;net-to-net&quot; #2: discarding duplicate packet; already STATE_QUICK_I1<br>pluto[2176]: | next event EVENT_RETRANSMIT in 39 seconds for #2</p>
<p>----------------------------------------------------------------------------------------------------------------------------------</p>
<p><font color="#ff6666">After my debugging, I found this problem happened because &quot;ip route flush cache&quot; <br>command in uprule() of /usr/local/lib/ipsec/_updown file.</font></p>
<p>&nbsp;On my arm box,there is no &quot;ip route flush cache&quot; command to execute,so the security tunnel</p>
<p>can&#39;t setup completely.</p>
<p>&nbsp;</p>
<p>Anyone can give me direction to solve the problem !</p>
<p>Thanks<br></p></div>