[Openswan Users] openswan startup and version interoperability

Brian Sheets brians at fl240.com
Sun Jul 23 19:09:34 CEST 2006


 Debian linux, kernel vmlinuz-2.6.15-1-686, openswan version
1:2.4.5+dfsg-
 0.2
 
 Trying to connect to openswan 2.2.0
 
 Config on both sides
 
 version 2.0     # conforms to second version of ipsec.conf
specification
 
 config setup
         plutodebug=all
         interfaces=%defaultroute
 
 
virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16,%v4:
 !10.0.0.0/24
 
 conn net-to-net
     left=207.7.xx.xx
     leftsubnet=10.1.0.0/16
     leftid=@l3-gateway1.xx.net       #
     leftrsasigkey=<the really long key>
     leftnexthop=%defaultroute      # correct in many situations
     right=198.172.xx.xx
     rightsubnet=10.200.0.0/16
     rightid=@gateway1.xx.net
     rightrsasigkey=<the other really long key>
     rightnexthop=%defaultroute     # correct in many situations
     auto=add                       # authorizes but doesn't start this
                                    # connection at startup
 # Add connections here
 
 #Disable Opportunistic Encryption
 include /etc/ipsec.d/examples/no_oe.conf

 
 startup on the 2.6.15 kernal box gives me
 
 l3-gateway1:/etc/init.d# sh ./ipsec restart
 ipsec_setup: Stopping Openswan IPsec...
 ipsec_setup: Starting Openswan IPsec 2.4.5...
 ipsec_setup: insmod /lib/modules/2.6.15-1-686/kernel/net/key/af_key.ko
 ipsec_setup: insmod /lib/modules/2.6.15-1-
 686/kernel/net/ipv4/xfrm4_tunnel.ko
 ipsec_setup: insmod
/lib/modules/2.6.15-1-686/kernel/net/xfrm/xfrm_user.ko
 ipsec_setup: insmod /lib/modules/2.6.15-1-
 686/kernel/drivers/char/hw_random.ko
 ipsec_setup: FATAL: Error inserting hw_random (/lib/modules/2.6.15-1-
 686/kernel/drivers/char/hw_random.ko): No such device
 ipsec_setup: insmod /lib/modules/2.6.15-1-
 686/kernel/drivers/crypto/padlock.ko
 ipsec_setup: FATAL: Error inserting padlock (/lib/modules/2.6.15-1-
 686/kernel/drivers/crypto/padlock.ko): No such device
 
 In addition, ipsec auto --up net-to-net hangs from the command line,
but
 on the other, openswan 2.2 system, there is an attempt to make a
 connection in the logs
 
 So, my question, are the errors bad? What could be causing it to hang?
 
 Thanks
 
 Brian



More information about the Users mailing list