[Openswan Users] X-WRT (Openwrt) - "inet: Unknown host" & "We cannot identify ourselves with either end of this connection" errors - HELP PLEASE !!!

Sergio Aguilera checho.aguilera at gmail.com
Tue May 1 08:32:30 EDT 2007


Hi All, I have been have some issues trying to setup an  IPSec VPN
between Mitsubishi R100 (Asus WL500g) with X-WRT (White Russian  0.9)
and a Billion 7404VGM Router.

I'm getting the following errors:

1-)  "ifconfig: inet: Unknown host" error when I start/restart IPSec

root at OpenWrt:/bin$ ipsec setup restart
ipsec_setup: rmmod: ipsec: Success

ipsec_setup: Stopping Openswan IPsec...

ipsec_setup: Starting Openswan IPsec 2.4.6...

ipsec_setup: insmod: a module named ipsec already exists

ipsec_setup: ifconfig: inet: Unknown host

2-) "We cannot identify ourselves with either end of this connection"
when I try and bring up a tunnel

root at OpenWrt:/etc/ipsec.d/private$ ipsec auto --up bonny
022 "bonny": We cannot identify ourselves with either end of this connection.

The only clue that I have been able to find is on the following post
(http://lists.openswan.org/pipermail/users/2007-April/012212.html)
which talks about and issue with ifconfig in Busybox 1.4.0.

I'm clueless as to how I should attempt to fix this problem and I
would appreciate your help as I have now spent a long time trying to
get this sorted.

Thanks,

Sergio


More Information about my configuration follows ...

root at OpenWrt:/bin$ cat /etc/banner
  _______                     ________        __
 |       |.-----.-----.-----.|  |  |  |.----.|  |_
 |   -   ||  _  |  -__|     ||  |  |  ||   _||   _|
 |_______||   __|_____|__|__||________||__|  |____|
          |__| W I R E L E S S   F R E E D O M
 WHITE RUSSIAN (0.9) -------------------------------
  * 2 oz Vodka   Mix the Vodka and Kahlua together
  * 1 oz Kahlua  over ice, then float the cream or
  * 1/2oz cream  milk on the top.
 ---------------------------------------------------


============================================================
root at OpenWrt:/bin$ ./busybox --help
BusyBox v1.4.0 (2007-02-24 00:35:56 EST) multi-call binary
Copyright (C) 1998-2006  Erik Andersen, Rob Landley, and others.
Licensed under GPLv2.  See source distribution for full notice.

============================================================
root at OpenWrt:/bin$ cat /etc/ipsec.conf
# /etc/ipsec.conf - Openswan IPsec configuration file
# RCSID $Id: ipsec.conf.in,v 1.15.2.4 2006/07/11 16:17:53 paul Exp $

# This file:  /usr/share/doc/openswan/ipsec.conf-sample
#
# Manual:     ipsec.conf.5


version 2.0  # conforms to second version of ipsec.conf specification

# basic configuration
config setup
  # plutodebug / klipsdebug = "all", "none" or a combation from below:
  # "raw crypt parsing emitting control klips pfkey natt x509 private"
  # eg:
  # plutodebug="control parsing"
  #
  # Only enable klipsdebug=all if you are a developer
  #
  # NAT-TRAVERSAL support, see README.NAT-Traversal
  nat_traversal=yes
  interfaces="ipsec0=br0"
  # virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
  #
  # enable this if you see "failed to find any available worker"
  nhelpers=0

# Add connections here
include /etc/ipsec.d/private/bonny

# sample VPN connections, see /etc/ipsec.d/examples/

#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf

============================================================

root at OpenWrt:/bin$ cat /etc/ipsec.d/private/bonny
conn bonny
  #left side is home
  left=202.168.21.181
  leftid=202.168.21.181
  leftsubnet=192.168.168.0/24
  leftnexthop=%defaultroute
  #right side is work
  right=60.242.104.57
  rightid=60.242.104.57
  rightsubnet=192.168.168.0/24
  keyexchange=ike
  ike=3des-sha1-modp1024
  auth=esp
  authby=secret
  #specify encryption FortiGate VPN uses
  esp=3des
  #Disable perfect forward secrecy (default yes)
  pfs=no
  keylife=28800s
  keyingtries=3
  auto=start
root at OpenWrt:/bin$
============================================================

root at OpenWrt:/bin$ ipsec setup restart
ipsec_setup: rmmod: ipsec: Success

ipsec_setup: Stopping Openswan IPsec...

ipsec_setup: Starting Openswan IPsec 2.4.6...

ipsec_setup: insmod: a module named ipsec already exists

ipsec_setup: ifconfig: inet: Unknown host

root at OpenWrt:/bin$

============================================================

root at OpenWrt:/etc/ipsec.d/private$ ipsec auto --up bonny
022 "bonny": We cannot identify ourselves with either end of this connection.

============================================================

root at OpenWrt:/etc/ipsec.d/private$ ifconfig
br0       Link encap:Ethernet  HWaddr 00:11:2F:E0:FE:A2
          inet addr:192.168.1.1  Bcast:192.168.1.255  Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:13658 errors:0 dropped:0 overruns:0 frame:0
          TX packets:14811 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1510740 (1.4 MiB)  TX bytes:8879236 (8.4 MiB)

eth0      Link encap:Ethernet  HWaddr 00:11:2F:E0:FE:A2
          UP BROADCAST RUNNING PROMISC ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:13656 errors:0 dropped:0 overruns:0 frame:0
          TX packets:18327 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:1756374 (1.6 MiB)  TX bytes:9181807 (8.7 MiB)
          Interrupt:3

eth1      Link encap:Ethernet  HWaddr 00:11:2F:E0:FE:A2
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:12342 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9424 errors:0 dropped:0 overruns:0 carrier:9416
          collisions:0 txqueuelen:1000
          RX bytes:8183250 (7.8 MiB)  TX bytes:1907170 (1.8 MiB)
          Interrupt:4

eth2      Link encap:Ethernet  HWaddr 00:11:2F:E0:FE:A2
          UP BROADCAST RUNNING ALLMULTI MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:19483
          TX packets:0 errors:1 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)
          Interrupt:6 Base address:0x2000

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:0 (0.0 B)  TX bytes:0 (0.0 B)

ppp0      Link encap:Point-to-Point Protocol
          inet addr:202.168.21.181  P-t-P:203.221.196.1  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1492  Metric:1
          RX packets:11040 errors:0 dropped:0 overruns:0 frame:0
          TX packets:8947 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:5
          RX bytes:7795709 (7.4 MiB)  TX bytes:1643948 (1.5 MiB)


More information about the Users mailing list