[Openswan Users] questions about %defaultroute

Dan Meiron dim at caltech.edu
Fri Oct 13 18:40:51 EDT 2006


I'm new to openswan and am having problems setting it up on my laptop.

The laptop runs Suse Linux 10.1 and I have downloaded and installed 
openswan-2.4.4-18

When the system is booted up I get the following messages:


Setting up IPsec policies              				 							done
Starting IPsec IKE daemon (racoon) 										done
ipsec_setup: Starting Openswan IPsec U2.4.4/K2.6.16.21-0.25-smp...
ipsec_setup: insmod /lib/modules/2.6.16.21-0.25-smp/kernel/net/ipv4/ah4.ko 
ipsec_setup: insmod /lib/modules/2.6.16.21-0.25-smp/kernel/net/ipv4/esp4.ko 
ipsec_setup: insmod /lib/modules/2.6.16.21-0.25-smp/kernel/net/ipv4/ipcomp.ko 
ipsec_setup: 
insmod /lib/modules/2.6.16.21-0.25-smp/kernel/net/ipv4/xfrm4_tunnel.ko 
ipsec_setup: 
insmod /lib/modules/2.6.16.21-0.25-smp/kernel/net/xfrm/xfrm_user.ko 
ipsec_setup: no default route, %defaultroute cannot cope!!!
																	done

I have looked at the various postings and read the Openswan book  and checked 
that a default route does seem to exist on eth0: which is the wired 
interface:

ip route gives

10.128.205.0/24 dev eth0  proto kernel  scope link  src 10.128.205.107
127.0.0.0/8 dev lo  scope link
default via 10.128.205.1 dev eth0

and in general on other networks I do get a default route. The laptop has two 
interfaces eth0 (wired) and eth1 wireless.

I enabled ip forwarding on interface eth0  but I wouldn't have thought this 
was necessary amd it doesn't solve the issue

My main goal is to set up a road warrior connection from this laptop to a 
Linksys RV0041 router. The connection entry following the Openswan book is

conn meiron-office
        right=meiron.cs.caltech.edu
        left=%defaultroute
        leftid=dim at caltech.edu

I can't get off the ground until the defaultroute issue is clarified.

I realize this must be a simple thing but I am basically a newbie and so would 
appreciate any help

thanks, Dan Meiron






More information about the Users mailing list