[Openswan Users] Re-6: VPN starts but fails two minutes later

[Paul Wouters]

On Wed, 23 Aug 2006, Ludovic MARCILLY wrote:

> > Yes, to find out any potential failure or success, we would need to see the
> > logs that detail the failure or success.

> Aug 23 09:47:50 pluto[1707]: "Test" #2: IPsec SA established

> Aug 23 09:47:53 l2tpd[1762]: start_pppd: I'm running:

> Aug 23 09:47:53 pppd[1775]: Using interface ppp0
> Aug 23 09:47:53 pppd[1775]: Connect: ppp0 <--> /dev/ttyp0

> Aug 23 09:47:55 pppd[1775]: local  IP address 192.168.5.239
> Aug 23 09:47:55 pppd[1775]: remote IP address 192.168.5.240
> Aug 23 09:47:55 pppd[1775]: Script /etc/ppp/ip-up started (pid 1777)
> Aug 23 09:47:55 netsecure: PPP has gone up on ppp0

So that all looks good.

> Aug 23 09:48:05 ipsec_setup: Stopping Openswan IPsec...

And then you shutdown openswan

> Aug 23 09:48:06 ipsec_setup: Starting Openswan IPsec 1.0.7...

My guess is that there are various bugfixes needed that are not in openswan-1.

> Yes, but i have to patch kernel so, even if i stay with my kernel version, i have to use the new kernel...

openswan-2 can build an ipsec module "out of tree", so you don't have to change
the kernel sources. Though in your case, you would first have to unpatch the
openswan-1 code.

Paul