[Openswan dev] FreeSwan/uClinux using pluto and whack: ipsec0 not found

[Paul Wouters]

On Thu, 24 Jan 2008, aparna.dutta wrote:

You need the ipsec.o/ipsec.ko module which is the KLIPS kernel module.

Paul

> Date: Thu, 24 Jan 2008 18:51:11 +0530
> From: aparna.dutta <aparna.dutta at jasmin-infotech.com>
> To:  <dev at openswan.org>
> Subject: [Openswan dev] FreeSwan/uClinux using pluto and whack: ipsec0 not
>     found
>
>
>
> I am trying to get the uClinux ported Freeswan to work on Analog Devices
> BF561.
>
> Since the wrapper ipsec scripts are not available on uClinux FreeSwan, I am
> trying to use pluto and whack commands directly as follows:
>
>
>
> $ pluto -interface ipsec0 &
>
> $ whack -debug-all
>
> $ whack -name westeast -id aa.bb.cc.dd -host aa.bb.cc.dd -to -id pp.q.rr.ss
> -host -pp.qq.rr.ss -rsasig -tunnel -esp AES-MD5-2048
>
> $ whack -keyid pp.qq.rr.ss <PUBLICRSAKEYOFTHEOTHERHOST>
>
> $ whack -listen
>
>
>
> The first 4 commands are successful, but the last listen command gives:
>
> $ No public interfaces found
>
>
>
> Since this is freeswan, it must be using the KLIPS stack which requires the
> ipsecN interface. So I try
>
> $ tncfg -attach -virtual ipsec0 -physical eth0
>
>
>
> This gives $ tncfg: Socket ioctl failed on attach. -No such device. Is the
> virtual device valid? Is the ipsec module linked into the kernel or loaded
> as module?
>
>
>
> The logs in /var/log/messages show:
>
>
>
> Found eth0 with address aa.bb.cc.dd
>
> IP interface eth0 with address aa.bb.cc.dd has no matching ipsec* interface
> -ignored
>
> Found lo with address 0000:0000:.0001
>
> IP interface lo with address 000.0001 has no matching ipsec* interface
> -ignored
>
>
>
> This means that it is looking for an installed ipsec0 interface. How do I go
> about registering/installing a virtual network interface ipsec0?
>
>
>
> Thanks and regards,
>
> Aparna
>
>
>
>
>
>
>
>
>
>
>
>

-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155