[Openswan Users] the problem of openswan-2.6.23dr1

weiruyao weiruyao at 163.com
Fri Aug 21 21:17:36 EDT 2009



 
Firstly, Thanks for your reply.
"Paul Wouters" paul at xelerance.com> :
>On Fri, 21 Aug 2009, weiruyao wrote:
>
>> >This is a networking issue, not an openswan issue? Without openswan
>> >running on either end, can you ping 192.168.1.104? if that works, can
>> >you do "ipsec ikeping 192.168.1.104" ?
>> >
>> Withour openswan running on either end ,I can ping 192.168.1.104,but can't ipsec ikeping 192.168.1.104:
>> / $ ipsec ikeping 192.168.1.104
>> Sending packet to 192.168.1.104/500
>> 1 packets sent, 0 packets received. 100% packet loss
>> Only after I start openswan in?both end?,ipsec ikeping 192.168.1.104 success:
>> / $ ipsec ikeping 192.168.1.104
>> v4 bind: Address already in use
>> Is it normall??
>
>You would need to run openswan on one end, and stop it on the end you are
>trying ipsec ikeping from.
yes,it is.I run openswan on 192.168.1.104,and I can ping 192.168.1.104,but can't ipsec ikeping 192.168.1.104:
/ $ ipsec ikeping 192.168.1.104
Sending packet to 192.168.1.104/500
1 packets sent, 0 packets received. 100% packet loss
Only after I start openswan in?both end?,ipsec ikeping 192.168.1.104 success:
/ $ ipsec ikeping 192.168.1.104
v4 bind: Address already in use
>Once our GSoC livetest code has been merged into openswan, this is all
>automated for you and you should be able to use "ipsec livetest" to test
>your local network/firewall/mtu settings.
>
I'll try tomorrow.
Paul,Thanks you again.
I try ipsec livetest just now :
/usr/local/sbin/ipsec: unknown IPsec command `livetest' (`ipsec --help' for list)
I use NETKEY,is this program only supported in KLIPS?
Thank you again.


没有广告的终身免费邮箱,www.yeah.net
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20090822/7146095b/attachment.html 


More information about the Users mailing list