[Openswan Users] RE: DPD - plutodebug=dpd

Shi Lang shilang at greenpacket.com
Thu Aug 10 07:49:26 EDT 2006


Thanks Paul,

I followed your instruction:
########################################
vi /etc/ipsec.conf:
# /etc/ipsec.conf - Openswan IPsec configuration file
version 2.0     # conforms to second version of ipsec.conf specification
# basic configuration
config setup
        klipsdebug=none
        pluto=yes
        plutodebug=dpd
# Add connections here
conn %default
        leftupdown=/usr/local/lib/ipsec/_updown_custom
        rightupdown=/usr/local/lib/ipsec/_updown_custom
include /etc/ipsec.d/examples/no_oe.conf
conn Private_test1
########################################
Then I 
service ipsec restart
ipsec_setup: Stopping Openswan IPsec...
ipsec_setup: Starting Openswan IPsec 2.2.0...
ipsec_setup: Using /lib/modules/2.4.20/kernel/net/ipsec/ipsec.o
Then I
ipsec auto --status
whack: Pluto is not running (no "/var/run/pluto.ctl")
~~~~~~~~~~~~~~~~~~~~~~~~
My version is 2.2.0, if I set plutodebug=all, or plutodebug=dns or others,
ipsec auto --status can show information, why for me set to dpd, it says
pluto is not running? I then try the lastest version set to dpd, --status
displays correctly information.

What I made mistakes?

Thanks very much
Regards,
Shi Lang

-----Original Message-----
From: Paul Wouters [mailto:paul at xelerance.com] 
Sent: Thursday, August 10, 2006 12:29 PM
To: Shi Lang
Cc: users at openswan.org
Subject: RE: DPD

On Thu, 10 Aug 2006, Shi Lang wrote:

> My another doubt is how to see the U_R_THERE message, can I do

Add to ipsec.conf in config setup:

	plutodebug=dpd

Paul



More information about the Users mailing list