[Openswan Users] IPv6 Openswan trouble
Paul Whelan
wheelo_01 at hotmail.com
Fri Feb 1 12:06:19 EST 2008
Hello,
I am having trouble trying to setup Openswan using ipv6.
I get the error
# service ipsec restart
ipsec_setup: Stopping Openswan IPsec...
ipsec_setup: stop ordered, but IPsec does not appear to be running!
ipsec_setup: doing cleanup anyway...
ipsec_setup: Starting Openswan IPsec U2.4.9/K2.6.18-prep...
ipsec_setup: unable to determine address of `eth1'
There doesn't seem to be anything wrong with the interface it's trying
to use. I can ping it using ping6 command, and ping from and to another
host
(connected via crossover) setup up in the same way with antoher ipv6 address.
Everything works perfectly when i use ipv4 addresses.
I've tried Klips and netkey both with the same error.
Does Openswan 2.4.9 work with ipv6 out of the box or is there any patches required?
# ifconfig eth1
eth1 Link encap:Ethernet HWaddr 00:40:F4:87:5C:5A
inet6 addr: 2001:db8:1:1::1/64 Scope:Global
inet6 addr: fe80::240:f4ff:fe87:5c5a/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:28 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:5300 (5.1 KiB)
Interrupt:225 Base address:0xe400
Following is my ipsec.conf
#############################################################
version 2.0 # conforms to second version of ipsec.conf specification
# basic configuration
config setup
interfaces=ipsec0=eth1
klipsdebug=none
plutodebug=none
uniqueids=yes
# Add connections here
#conn %default
# keyingtries=0
conn ipv6-to-ipv6
connaddrfamily=ipv6
left=2001:db8:1:1::1
leftrsasigkey=0sAQOjfaHR/hv0Quh... RgsD/quh
right=2001:db8:2:2::2
rightrsasigkey=0sAQOmYfm+ .. ....bjbFg9w8wp
esp=3des-hmac_sha1
authby=rsasig
type=tunnel
auto=add
include /etc/ipsec.d/examples/no_oe.conf
################################################################
Regards,
Pól Whelan
_________________________________________________________________
Helping your favorite cause is as easy as instant messaging. You IM, we give.
http://im.live.com/Messenger/IM/Home/?source=text_hotmail_join
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20080201/d8daf98d/attachment.html
More information about the Users
mailing list