[Openswan Users] roadwarrior over pppoe

[Paulo F. Sedrez]

On Tue, 2007-08-28 at 12:13, Peter McGill wrote: 
> B is not getting a good internet connection setup, it can't find
> default route.
> Before you try to start openswan on B, make sure the internet
> connection DSL PPPoE is up and running.
> ifconfig should show an interface for the internet, probably ppp0.
> route should show a default route:
> ie) 0.0.0.0/0 gw ?.?.?.?

Actually, there is a bug introduced in version 2.4.9. It was corrected
only for 2.5.x tree, but there is a fix: check out
http://bugs.xelerance.com/view.php?id=824 .

Basically, the _startklips script expects an IP for default route; if it
is device route (e.g., "default dev ppp0"), without IP, it tries (and
fails) to use the interface address.

> Peter McGill
>  
>         
>         ______________________________________________________________
>         From: users-bounces at www.openswan.org
>         [mailto:users-bounces at www.openswan.org] On Behalf Of Toni
>         Cosma
>         Sent: August 28, 2007 10:22 AM
>         To: users at www.openswan.org
>         Subject: [Openswan Users] roadwarrior over pppoe
>         
>         
>         Hi all,
>          
>         I try to make a roadwarrior tunnel
>         from A to B.
[...]
>          
>         after "ipsec start" B syslog is:
>                 Aug 28 17:06:21 B ipsec__plutorun: ipsec_auto: fatal
>                 error in "A-B_rw": %defaultroute requested but not
>                 known
>                 Aug 28 17:06:21 B ipsec__plutorun: 021 no connection
>                 named "A-B_rw"
>                 Aug 28 17:06:21 B ipsec__plutorun: ...could not route
>                 conn "A-B_rw"
>                 Aug 28 17:06:21 B ipsec__plutorun: 021 no connection
>                 named "A-B_rw"
>                 Aug 28 17:06:21 B ipsec__plutorun: ...could not start
>                 conn "A-B_rw"
>         and A error message after: ipsec auto --up A-B_rw is:
>                     "A-B_rw": cannot initiate connection without
>         knowing peer IP address (kind=CK_TEMPLATE)
>          
>         Thx for help.

-- 
Paulo F. Sedrez <sedrez+openswan at sedrez.ods.org>