[Openswan Users] Ipsec auto --up {tunnelname} hangs

Paul Wouters paul at xelerance.com
Fri Jun 20 14:27:29 EDT 2008


On Fri, 20 Jun 2008, Greg Scott wrote:

>> There are actually 2 tunnels between this particular left side
>> and the right side. One is a "static" tunnel - defined in the conn
>> definition with auto=start - and the other is a "dynamic"
>> tunnel - defined as above with auto=ignore.  ("Static" and "dynamic"
>> are my descriptive words for this case.)
>
> Oh yes - and why 2 tunnels from the same left side to the same right
> side?  The left side has 2 LANs and my left side Linux router has 3
> NICs.  (It actually has more than 3 NICs, but 3 relevant to this issue.)
> One LAN needs a "static" tunnel, the other LAN normally routes via the
> MPLS cloud and wants to use my stuff for backup routing.  The

the will end up sharing a phase1 if you connect both tunnels to the same
IP addresses on each end. Which might be part of your problem?

Paul



More information about the Users mailing list