[Openswan Users] the problem of openswan-2.6.23dr1

[Paul Wouters]

On Thu, 20 Aug 2009, weiruyao wrote:

> After I restart the openswan ,the log in roadwarrior side shows:
> Mar 12 03:21:22 pluto[3984]: "tunnelipsec" #2: initiating Main Mode to
> replace #1
> Mar 12 03:21:22 pluto[3984]: "tunnelipsec" #2: ERROR: asynchronous
> network error report on eth0 (sport=500) for message to 192.168.1.104
> port 500, complainant 192.168.1.104: No route to host [errno 113, origin

This is a networking issue, not an openswan issue? Without openswan
running on either end, can you ping 192.168.1.104? if that works, can
you do "ipsec ikeping 192.168.1.104" ?

> I execute ipsec verify ,things seem abnormal:
> Pluto listening for NAT-T on udp 4500                           [FAILED]
> Two or more interfaces found, checking IP forwarding            [FAILED]
> I have already enable ip_forward:
> [root at wrylab lo]# cat /proc/sys/net/ipv4/ip_forward
> 1
> But it also shows FAILED.

Not sure why that is.

Paul