[Openswan Users] [Openswan dev] book example yields - No route to host...not authenticated using

[Paul Wouters]

On Sun, 26 Nov 2006, Bruce S. Skinner wrote:

[changed dev@ to user@ as this is not an openswan bug/issue]

>
> When I try the Host-to-Host example setup described in "Building and
> Implementing Virtual Private Networks with Openswan", page 82, I get
> the following "no route / not authenticated" error.
>
>   pluto[4529]: "sample" #1: ERROR: asynchronous network error report
>   on eth0 (sport=500) for message to 10.1.1.11 port 500, complainant
>   172.31.1.200: No route to host [errno 113, origin ICMP type 3 code 1
>   (not authenticated)]
>
> Is this an authentication issue or a routing issue?

A router in the midde, 172.31.1.200, cannot reach 10.1.1.11.

> Before I start ipsec I can ping from host to host. After running
> /etc/init.s/ipsec start I see link level routes appear on eth0 of left
> and right sides for the ip address of the peer, but no traffic flows
> and pluto logs the above error.

I don't know why that routing would suddenly break.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155