[Openswan Users] FC3: IPSec (openswan) Functionality

[Elias Valea Peri]

Pay attention that by default KLIPS is not used for 2.6 kernels, the new
26sec implementation for ipsec is used in its place.
If you need to use KLIPS, you need at least Openswan 2.3.0 and follow the
special compilation/installation instructions.
I prefer 26sec for 2.6 kernels, so actually KLIPS implementation is not
completed and there're a few tricks using it.
In the other way 26sec doesn't offers to you the ipsec interfaces, and i
think this is less practical for routing and filtering purposes.

Elias

> Hello,
>
> Does anyone seem to be having any trouble with using IPSec (openswan) in
> FC3?  I've tried using the network tool provided, but it doesn't seem to
> want to connect.  I also tried using my own configuration files
> (ipsec.conf and ipsec.secrets) and that didn't seem to get anywhere.
> Here are the results in the logs:
> May  2 13:36:24 testimax ipsec: Starting Openswan IPsec
> U2.1.5/K2.6.9-1.667...
> May  2 13:36:25 testimax ipsec: /usr/lib/ipsec/_startklips: KLIPS ipsec0
> on eth1 70.182.220.68/255.255.255.224 broadcast 70.182.220.95
> May  2 13:36:25 testimax ipsec_setup: KLIPS ipsec0 on eth1
> 70.182.220.68/255.255.255.224 broadcast 70.182.220.95
> May  2 13:36:25 testimax ipsec: /usr/lib/ipsec/_plutorun: Starting Pluto
> subsystem...
> May  2 13:36:25 testimax ipsec_setup: Starting Pluto subsystem...
> May  2 13:36:25 testimax ipsec_setup: ...Openswan IPsec started
> May  2 13:36:25 testimax ipsec: Starting IPsec:  succeeded
>
>
> IS there some new log file or some new trick I need to know about?  I
> also didn't see ipsec0 listed in /sbin/ifconfig ...  seems odd to me.
> I'm used to openswan on Red Hat 7.3...seemed to work great once I had it
> configured :)   If anyone could provide me with a good link to
> documenation specifically for FC3 and ipsec, I'd very much appreciate
> it.  I did update openswan and the ipsec-tools to the latest versions.
>
> Thanks,
> Phillip
> _______________________________________________
> Users mailing list
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
>