[Openswan Users] responder-initiator assimetry (blocked at QI)

Paul Wouters paul at xelerance.com
Tue Sep 13 18:39:46 CEST 2005


On Tue, 13 Sep 2005, Albert Agustí wrote:

> Thanks a lot Paul,
>
> Solved only with line esp=3des in ipsec.conf al tunnel definitions, so
> You where right. I'm a bit surprised because I checked cisco
> configurations and exact routers behave different in that sense. Changed
> from openswan 2.2.0 to 2.3.0 (first offer).

Good!

> Were that continuos retransmissions the cause of message logs like this
> ?
>
> can not start crypto helper: failed to find any available worker

Yes, it seems you had (too) many instances trying to setup that one connection.

Paul


More information about the Users mailing list