[Openswan Users] Good old "cannot identify ourselves" and %defaultroute issue...

[Paul Wouters]

On Thu, 16 Jul 2009, Marc wrote:

> config setup
>         protostack=netkey
>         forwardcontrol=yes
>         klipsdebug=none
>         nat_traversal=yes
>         uniqueids=yes
>         plutowait=yes
>         plutodebug=none
>         plutodebug=all
>  
> conn %default
>         keyingtries=0
>         compress=yes
>         disablearrivalcheck=no
>         authby=rsasig
>         leftrsasigkey=%cert
>         rightrsasigkey=%cert
>  
> conn vpn-conn
>         right=%defaultroute

If you want to use %defaultroute, then config setup needs an entry:

 	interfaces="%defaultroute"

>     ipsec_setup: Starting Openswan IPsec 2.6.16...

Also please upgrade to 2.6.22.

Paul