[Openswan Users] IPv6 Openswan trouble

Paul Whelan wheelo_01 at hotmail.com
Fri Feb 1 12:06:19 EST 2008





Hello,

I am having trouble trying to setup Openswan using ipv6.
I get the error 

# service ipsec restart
ipsec_setup: Stopping Openswan IPsec...
ipsec_setup: stop ordered, but IPsec does not appear to be running!
ipsec_setup: doing cleanup anyway...
ipsec_setup: Starting Openswan IPsec U2.4.9/K2.6.18-prep...
ipsec_setup: unable to determine address of `eth1'

There doesn't seem to be anything wrong with the interface it's trying
to use. I can ping it using ping6 command, and ping from and to another
host 

(connected via crossover) setup up in the same way with antoher ipv6 address.

Everything works perfectly when i use ipv4 addresses.
I've tried Klips and netkey both with the same error.

Does Openswan 2.4.9 work with ipv6 out of the box or is there any patches required?

# ifconfig eth1
eth1      Link encap:Ethernet  HWaddr 00:40:F4:87:5C:5A
          inet6 addr: 2001:db8:1:1::1/64 Scope:Global
          inet6 addr: fe80::240:f4ff:fe87:5c5a/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:0 errors:0 dropped:0 overruns:0 frame:0
          TX packets:28 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:0 (0.0 b)  TX bytes:5300 (5.1 KiB)
          Interrupt:225 Base address:0xe400


Following is my ipsec.conf
#############################################################

version 2.0     # conforms to second version of ipsec.conf specification

# basic configuration
config setup
        interfaces=ipsec0=eth1
        klipsdebug=none
        plutodebug=none
        uniqueids=yes

# Add connections here
#conn %default
#       keyingtries=0

conn ipv6-to-ipv6
        connaddrfamily=ipv6
        left=2001:db8:1:1::1
        leftrsasigkey=0sAQOjfaHR/hv0Quh... RgsD/quh
        right=2001:db8:2:2::2
        rightrsasigkey=0sAQOmYfm+ .. ....bjbFg9w8wp
        esp=3des-hmac_sha1
        authby=rsasig
        type=tunnel
        auto=add

include /etc/ipsec.d/examples/no_oe.conf


################################################################

Regards,
Pól Whelan

_________________________________________________________________
Helping your favorite cause is as easy as instant messaging. You IM, we give.
http://im.live.com/Messenger/IM/Home/?source=text_hotmail_join
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20080201/d8daf98d/attachment.html 


More information about the Users mailing list