[Openswan Users] the problem of openswan-2.6.23dr1

[Paul Wouters]

On Fri, 21 Aug 2009, weiruyao wrote:

> >This is a networking issue, not an openswan issue? Without openswan
> >running on either end, can you ping 192.168.1.104? if that works, can
> >you do "ipsec ikeping 192.168.1.104" ?
> >
> Withour openswan running on either end ,I can ping 192.168.1.104,but can't ipsec ikeping 192.168.1.104:
> / $ ipsec ikeping 192.168.1.104
> Sending packet to 192.168.1.104/500
> 1 packets sent, 0 packets received. 100% packet loss
> Only after I start openswan in both end ,ipsec ikeping 192.168.1.104 success:
> / $ ipsec ikeping 192.168.1.104
> v4 bind: Address already in use
> Is it normall??

You would need to run openswan on one end, and stop it on the end you are
trying ipsec ikeping from.

Once our GSoC livetest code has been merged into openswan, this is all
automated for you and you should be able to use "ipsec livetest" to test
your local network/firewall/mtu settings.

Paul