[Openswan Users] the problem of openswan-2.6.23dr1

[Paul Wouters]

On Sat, 22 Aug 2009, weiruyao wrote:

> >You would need to run openswan on one end, and stop it on the end you are
> >trying ipsec ikeping from.
> yes,it is.I run openswan on 192.168.1.104,and I can ping 192.168.1.104,but can't ipsec ikeping 192.168.1.104:
> / $ ipsec ikeping 192.168.1.104
> Sending packet to 192.168.1.104/500
> 1 packets sent, 0 packets received. 100% packet loss

So this looks like you have a firewall blocking udp port 500 somewhere.

> Only after I start openswan in both end ,ipsec ikeping 192.168.1.104 success:
> 
> / $ ipsec ikeping 192.168.1.104
> v4 bind: Address already in use

This is not success. It is "failed to even start" because it could not
send a packet from udp port 500 because something else (openswan) was
started and already listening on that port.

Paul