[Openswan Users] ipsec needed restart

sasa sasa at shoponweb.it
Tue Nov 8 10:34:33 CET 2005


Hi, I use on Fedora Core 1 and kernel 2.4.22 the openswan 2.3.1-21 version 
but I have a problem that it forces to me to restart the service ipsec.
My ipsec.conf is:

config setup
interfaces="ipsec0=eth0"
nat_traversal=yes

conn %default
authby=secret

conn left-road
auto=add
authby=secret
pfs=no
type=transport
left=1.2.3.4
leftnexthop=1.2.3.5
leftprotoport=17/1701
right=%any
rightprotoport=17/1701
include /etc/ipsec.d/examples/no_oe.conf

.. when restart ipsec service I have:

[root at test2 root]# service ipsec restart
ipsec_setup: Stopping Openswan IPsec...
ipsec_setup: Attempt to shut Pluto down failed!  Trying kill:
ipsec_setup: /usr/lib/ipsec/_realsetup: line 1: kill: (28664) - No such 
process
ipsec_setup: Starting Openswan IPsec Ucvs2002Mar11_19:19:03/K2.1.2rc3..

..in the log file:

Nov  7 17:41:51 test2 pluto[28664]: "left-road"[6] x.x.x.x #1071: Can't 
authenticate: no preshared key found for `1.2.3.4' and `%any'.  Attribute 
OAKLEY_AUTHENTICATION_METHOD
Nov  7 17:41:51 test2 last message repeated 2 times
Nov  7 17:41:51 test2 pluto[28664]: "left-road"[6] x.x.x.x #1071: 
OAKLEY_DES_CBC is not supported.  Attribute OAKLEY_ENCRYPTION_ALGORITHM
Nov  7 17:41:51 test2 pluto[28664]: "left-road"[6] 81.174.38.254 #1071: 
OAKLEY_DES_CBC is not supported.  Attribute OAKLEY_ENCRYPTION_ALGORITHM
Nov  7 17:41:51 test2 pluto[28664]: "left-road"[6] x.x.x.x #1071: no 
acceptable Oakley Transform
Nov  7 17:41:51 test2 pluto[28664]: "left-road"[6] x.x.x.x #1071: sending 
notification NO_PROPOSAL_CHOSEN to x.x.x.x:500
Nov  7 17:41:51 test2 pluto[28664]: "left-road"[6] x.x.x.x #1071: failed to 
build notification for spisize=0

thanks.

------
Salvatore. 



More information about the Users mailing list