[Openswan Users] 2.6.11+IP_MULTIPLE_TABLES+openswan=broke

Art Mills aem at emergecore.com
Thu Dec 22 10:27:49 CET 2005


I am sure this is a kernel thing but since it affects openswan and may
help sombody

just compiling it does not break it but if you use it for example

kernel 2.6.11 ( no patches )
openswan 2.4.4

linux      = 10.0.100.107
xp machine = 172.25.173.2

run the command ip route add 172.25.173.0/24 dev eth0 via 10.0.100.104
table sometable

verify the xp machine can tak to the linux box

ipsec/l2tp connection from the xp box using certificates fails
run
ip tables flush table sometable
route add -net 172.25.173.0 netmask 255.255.255.0 gw 10.0.100.104
ipsec/l2tp now works

Symbol: IP_MULTIPLE_TABLES [=n]
Prompt: IP: policy routing
  Defined at net/ipv4/Kconfig:56
  Depends on: NET && IP_ADVANCED_ROUTER
  Location:
    -> Device Drivers
      -> Networking support
        -> Networking support (NET [=y])
          -> Networking options
            -> TCP/IP networking (INET [=y])
              -> IP: advanced router (IP_ADVANCED_ROUTER [=y])





More information about the Users mailing list