[Openswan Users] KLIPS on CentOS 5.1

[Paul Wouters]

On Wed, 3 Dec 2008, Sergio Cioban Filho wrote:

> > - Try actually using just mastX, by using protostack=mast instead of
> >  protostack=klips
> >
> > If that fails, try recompiling the openswan userland with USE_MAST=no
> 
> With protostack=mast the tunnel was established, but no eroute appeared ,
> and ping fail.

Did you reboot or unload/load the ipsec.ko module? With mast, you have
no eroutes.

> I've tried to compile with USE_MAST=no or USE_MAST=false enviorment
> vaeriable, but 'ipsec barf' yet shows mast and mast interface is present in
> "/proc/net/dev".

did you reboot or unload/load the ipsec.ko module after modifying ipsec.conf

Paul