[Openswan dev] starter-0.3 and default route

[Joshua Jackson]

> ===========================================
>
> However this is creating a problem with "ipsec route-host" throwing the
> folloiwng error.
> ==========================================
> "rw"[1] 192.168.1.41 #2: route-host output: SIOCADDRT: Network is
> unreachable "rw"[1] 192.168.1.41 #2: route-host output:
> /usr/local/lib/ipsec/_updown: `route add -net 192.168.1.41 netmask
> 255.255.255.255 dev ipsec0 gw 192.168.1.41' failed "rw"[1] 192.168.1.41 #2:
> route-host output: /usr/local/lib/ipsec/_updown: (incorrect or missing
> nexthop setting??) "rw"[1] 192.168.1.41 #2: route-host command exited with
> status 7
> "rw"[1] 192.168.1.41 #2: route-host output: SIOCADDRT: Network is
> unreachable "rw"[1] 192.168.1.41 #2: route-host output:
> /usr/local/lib/ipsec/_updown: `route add -net 192.168.1.41 netmask
> 255.255.255.255 dev ipsec0 gw 192.168.1.41' failed "rw"[1] 192.168.1.41 #2:
> route-host output: /usr/local/lib/ipsec/_updown: (incorrect or missing
> nexthop setting??) "rw"[1] 192.168.1.41 #2: route-host command exited with
> status 7


I ran into this as well. In the doroute() function of the _updown script, 
changing the following line:

       parms2="dev $PLUTO_INTERFACE gw $PLUTO_NEXT_HOP"

to:

       parms2="dev $PLUTO_INTERFACE"

Fixed the problem for me.  The next question is, since starter is slated for 
integration with OpenSwan, which piece of code will ultimately get changed?

-- 
Joshua Jackson
Vortech Consulting
http://www.vortech.net