[Openswan Users] error message when starting ipsec

[Paul Wouters]

On Mon, 22 Aug 2005, Vishal Dubey wrote:

> can anyone tell me what this erro message means when i start ipsec and how to 
> fix it?
>
> ipsec auto --up bc2sun
> 003 ERROR: "bc2sun" #3: netlink write() of XFRM_MSG_ALLOCSPI message for Get 
> SPI esp.0 at 12.12.12.5 failed. Errno 111: Connection refused

I think this error shows up with the memory fragmentation issue with old
versions of NETKEY when compression is enabled.

Try either upgrading to a newer kernel, or try compress=no

Paul