[Openswan Users] Phase I completed,but Phase II error

[李正光]

Dear Paul:
I have installed iproute2 package in my kernel, but the execute result is
still the same as before. The ping has something wrong. Please reference the
attached log file, and give me some suggestions!

Thanks in advance!

Jacky Lee


2007/10/22, Paul Wouters <paul at xelerance.com>:
>
> On Sat, 13 Oct 2007, ??? wrote:
>
> > the attached log files are x86/ARM  result
> > the arm version still can't ping????
>
> I looked at the log files. A few things I see:
>
> "management": prepare-client command exited with status 3
>
> Which looks like a busybox ip/route command that does not support
> what we need. Install a proper iproute2 package.
>
> Next, I see:
>
> arm_ipsec_nat_out.txt:pluto[273]: NAT-Traversal: ESPINUDP(2) not supported
> by ke
> rnel for family IPv4
> arm_ipsec_nat_out.txt:pluto[273]: NAT-Traversal port floating turned off
> arm_ipsec_nat_out.txt:pluto[273]: NAT-Traversal is turned OFF due to lack
> of KER
> NEL support: 0/0
>
> So one end does not support NAT-T. Which means you applied the KLIPS
> patch, but
> not the NAT-T patch.
>
> Paul
> --
> Building and integrating Virtual Private Networks with Openswan:
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20071101/f63e9acf/attachment-0001.html 
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: iproute2_log.txt
Url: http://lists.openswan.org/pipermail/users/attachments/20071101/f63e9acf/attachment-0001.txt