[Openswan Users] Fwd: Reg:IPv6 maual keying is not working with freeswan

sathya msathya.be at gmail.com
Tue Jul 21 01:53:36 EDT 2009


Hi,

 I could not mail to lists at freeswan.org since the server is not reachable.
Would
any of openswan users help me out of the trouble Please.

 I have 2 interfaces configured with v6 address and connected loopback.
I would like to establish a IPv6 connection for testing


Below is my setup detail

[root at root root]# ipsec setup restart
ipsec_setup: Stopping FreeS/WAN IPsec...
ipsec_setup: Starting FreeS/WAN IPsec 2.06...
ipsec_setup: Using /lib/modules/2.4.20-8smp/kernel/net/ipsec/ipsec.o

Both klips and Freeswan are version 2.06

But when I add the route it throws error

 ipsec spi --af inet6 --said tun0x200 at 3ffe:1::20 --ip6 --src 3
ffe:1::10 --dst 3ffe:1::20

ipsec spi  --af inet6 --said esp0x200 at 3ffe:1::20 --esp 3des-m
d5-96 --src 3ffe:1::10 --authkey 0x12345678_9abcdef0_2468ace0_13579bdf
--enckey
 0x01234567_89abcdef_02468ace_13579bdf_12345678_9abcdef0

 ipsec spigrp --said tun0x200 at 3ffe:1::20 esp0x200 at 3ffe:1::20

 ipsec eroute --eraf inet6 --replace --src 3ffe:1::10/32 --dst
 3ffe:2::10/32 --said tun0x200 at 3ffe:1::20
/usr/local/libexec/ipsec/eroute: pfkey write failed, returning -1 with
errno=96.
Unknown socket write error 96.  Please report as much detail as possible to
deve
lopment team.

[root at root root]# ipsec look

ipsec0->eth1 mtu=16260(1500)->1500
esp0x200@ ESP_3DES_HMAC_MD5: dir=out src=0.0.0.0 iv_bits=64bits
iv=0x6be81aa4c5e
189c9 alen=128 aklen=128 eklen=192 life(c,s,h)=addtime(75,0,0) refcount=4
ref=7
reftable=0 refentry=7
tun0x200@ IPIP: dir=out src=0.0.0.0 life(c,s,h)=addtime(92,0,0) refcount=4
ref=6
 reftable=0 refentry=6
Destination     Gateway         Genmask         Flags   MSS Window  irtt
Iface
10.1.1.0        0.0.0.0         255.255.255.0   U         0 0          0
eth1
10.1.1.0        0.0.0.0         255.255.255.0   U         0 0          0
eth1
10.1.1.0        0.0.0.0         255.255.255.0   U         0 0          0
ipsec0

Does the above output says ipsec got established?

Could anyone Please let me know what should be done to make the connection
establish?

Anyone's help is much appreciated.

Thanks for your time
-- 
Regards,
sathya



-- 
Regards,
sathya



-- 
Regards,
sathya
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20090721/9874cda6/attachment.html 


More information about the Users mailing list