[Openswan Users] Is "bug#412" already fixed ?
Tetsuya Okumichi
okumichi.tetsuya at jp.panasonic.com
Thu Oct 27 16:38:05 CEST 2005
Hi all,
http://bugs.xelerance.com/view.php?id=412
Is "bug#412" already fixed?
===================
I'm using Openswan 2.3.1 and 2.4.0 on Linux2.4.20,
Multiple tunnels between two vpn gateways are configured.
3 conn-section(test1, test2, test3) setting in "/etc/ipsec.conf".
When "ipsec setup --start",
test1 and test2 succeeded(IPsec SA is establised),
but test3 failed(IPsec SA isn't establised).
message with test3 in "/var/log/secure" below.
"test3" #16: can not start crypto helper: failed to find any available worker
Thid problem is evaded with "plutowait=yes".
But When reaky timing is same time test1=tes2=test3, Main Mode failed at test3.
keylife=2560s, rekeymargin=640s, rekeyfuzz=0%
message with test3 in /var/log/secure too.
"test3" #XX: can not start crypto helper: failed to find any available worker
I want to solve this bug "412".
Thanks for help.
============================================================
/etc/ipsec.conf
version 2.0
config setup
interfaces="ipsec0=eth0"
conn %default
authby=secret
ikelifetime=28800s
conn test1
leftsubnet=200.200.0.1/32
rightsubnet=200.200.10.1/32
leftprotoport=132
rightprotoport=132
type=tunnel
left=192.168.0.1
right=192.168.0.101
esp=3des-md5-96
keylife=2560s
rekeymargin=640s
rekeyfuzz=0%
auto=start
conn test2
leftsubnet=200.200.0.1/32
rightsubnet=200.200.10.2/32
type=tunnel
left=192.168.0.1
right=192.168.0.101
esp=3des-md5-96
keylife=2560s
rekeymargin=640s
rekeyfuzz=0%
auto=start
conn test3
leftsubnet=200.200.0.1/32
rightsubnet=200.200.10.0/24
leftprotoport=1
rightprotoport=1
type=tunnel
left=192.168.0.1
right=192.168.0.101
esp=3des-md5-96
keylife=2560s
rekeymargin=640s
rekeyfuzz=0%
auto=start
============================================================
Best regards,
Tetusya
More information about the Users
mailing list