[Openswan Users] (no subject)

[Paul Wouters]

On Fri, 13 Oct 2006, Rui Santos wrote:

> eth3: <BROADCAST,MULTICAST,UP,10000> mtu 1500 qdisc pfifo_fast qlen 100
>     inet X.X.X.246/27 brd X.X.X.255 scope global eth3
>     inet X.X.X.247/32 scope global eth3
>        valid_lft forever preferred_lft forever
>
> conn IPSEC
>        type=tunnel
>        leftsubnet=10.0.0.0/16
>        leftnexthop=X.X.X.234
>        left=X.X.X.247

> When I try to setup the connection I get:
> 022 "IPSEC": We cannot identify ourselves with either end of this connection.

You cannot use new style ip address additions. Please use the old-style aliases,
eg: ifconfig eth3:247 X.X.X.246

It is a known limitation in pluto that needs to get fixed.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155