[Openswan Users] FC3: IPSec (openswan) Functionality

[Paul Wouters]

On Mon, 2 May 2005, Phillip T. George wrote:

> Does anyone seem to be having any trouble with using IPSec (openswan) in FC3?

I am using it.

> I've tried using the network tool provided, but it doesn't seem to want to 
> connect.

I have not tried their network tool yet. Which command/package provides this?

> May  2 13:36:24 testimax ipsec: Starting Openswan IPsec U2.1.5/K2.6.9-1.667...

You are using NETKEY, so you have no ipsecN interfaces.

> May  2 13:36:25 testimax ipsec: /usr/lib/ipsec/_startklips: KLIPS ipsec0 on 
> eth1 70.182.220.68/255.255.255.224 broadcast 70.182.220.95
> May  2 13:36:25 testimax ipsec_setup: KLIPS ipsec0 on eth1 
> 70.182.220.68/255.255.255.224 broadcast 70.182.220.95

These KLIPS messages are wrong and need to be fixed by us. Bug entry logged
as http://bugs.xelerance.com/view.php?id=290

> IS there some new log file or some new trick I need to know about?  I also

Most logs are actually in /var/log/secure. Only the startup log is in
/var/log/messages on fedora.

> didn't see ipsec0 listed in /sbin/ifconfig ...  seems odd to me.  I'm used to 
> openswan on Red Hat 7.3...seemed to work great once I had it configured :) 
> If anyone could provide me with a good link to documenation specifically for 
> FC3 and ipsec, I'd very much appreciate it.  I did update openswan and the 
> ipsec-tools to the latest versions.

It should work without the ipsec interfaces.

Paul