[Openswan Users] IPsec + (GRE/BGP) undetermined routing issue s

[Kevin Clark]

Hrm, no.  Not in this set up.  We only do one tunnel connection per
host, and then place the remaining networks through that connection via
GRE/BGP.

At this time, our primary hub has three IPsec connections, all to
different hosts. :(  -- Is it only something that occurs in this
scenario or is it possible that the problem might manifest itself in
different configurations?

K



-----Original Message-----
From: Paul Wouters [mailto:paul at xelerance.com] 
Sent: Thursday, August 18, 2005 1:56 PM
To: Kevin Clark
Cc: Ferdinand O. Tempel; users at openswan.org
Subject: RE: [Openswan Users] IPsec + (GRE/BGP) undetermined routing
issues

On Thu, 18 Aug 2005, Kevin Clark wrote:

> It does appear that in the log, Pluto is sent a delete SA request, and
> then proceeds to delete each SA entry sequentially.  Then the log
shows
> a re-establishment of the IPsec SAs and everything looks fine.

Do you have multiple tunnels between two hosts for different subnets? If
so,
I believe there was a fix recently for a problem that sounds very
similar
to this one. Can you try 2.4.0rc1 and see if the problem remains?

Paul