[Openswan Users] Openswan/xl2tpd issue with nated roadwarriors

[Sebastian Gomez Velasco]

Hi Paul

I tried to install openswan from openswan-2.4.14.tar.gz, but I get this error in 'make programs':



make[1]: se
ingresa al directorio `/usr/src/openswan-2.4.14/doc'

cp /usr/src/openswan-2.4.14/doc/src/index.html index.html

make[1]: se sale del directorio
`/usr/src/openswan-2.4.14/doc'

make[1]: se ingresa al directorio `/usr/src/openswan-2.4.14/lib'

make[2]: se ingresa al directorio
`/usr/src/openswan-2.4.14/lib/libopenswan'

cc -I. -I/usr/src/openswan-2.4.14/linux/net/ipsec
-I/usr/src/openswan-2.4.14/linux/include -I/usr/src/openswan-2.4.14 -DDEBUG
-DWITH_UDPFROMTO -DHAVE_IP_PKTINFO -I/usr/src/openswan-2.4.14/include -g -O3
-DDISABLE_UDP_CHECKSUM -Wall -Wpointer-arith -Wcast-qual -Wstrict-prototypes
-Wbad-function-cast  -DNAT_TRAVERSAL   -c -o pfkey_v2_parse.o /usr/src/openswan-2.4.14/linux/net/ipsec/pfkey_v2_parse.c

En el fichero incluído de /usr/src/openswan-2.4.14/linux/net/ipsec/pfkey_v2_parse.c:64:

/usr/src/openswan-2.4.14/programs/pluto/defs.h:88:17: error: gmp.h: No existe
el fichero o el directorio

In file included from
/usr/src/openswan-2.4.14/linux/net/ipsec/pfkey_v2_parse.c:64:

/usr/src/openswan-2.4.14/programs/pluto/defs.h:90: error: expected ‘)’ before
‘*’ token

/usr/src/openswan-2.4.14/programs/pluto/defs.h:91:
aviso: el tipo de dato por defecto es ‘int’ en la declaración de ‘MP_INT’

/usr/src/openswan-2.4.14/programs/pluto/defs.h:91: error: expected ‘;’,
‘,’ or ‘)’ before ‘*’ token

make[2]: *** [pfkey_v2_parse.o] Error 1

make[2]: se sale del directorio
`/usr/src/openswan-2.4.14/lib/libopenswan'

make[1]: *** [programs] Error 1

make[1]: se sale del directorio `/usr/src/openswan-2.4.14/lib'

make: *** [programs] Error
1







> Date: Sat, 20 Jun 2009 15:15:38 -0400
> From: paul at xelerance.com
> To: blass_sgv at hotmail.com
> CC: users at openswan.org
> Subject: RE: [Openswan Users] Openswan/xl2tpd issue with nated roadwarriors
> 
> On Sat, 20 Jun 2009, Sebastian Gomez Velasco wrote:
> 
> > I'm gonna use openswan 2.4.14. I found this files in http://www.openswan.org/code/
> >  *  openswan-2.4.x.kernel-2.6.23-natt.patch (SIG)
> >  *  openswan-2.4.14.tar.gz (SIG)
> > 
> > Do I need to install openswan-2.4.x.kernel-2.6.23-natt.patch ?? If so, how??
> 
> No, you are using netkey, so you do not need any patches. just the tar ball
> to run 'make programs install'.
> 
> Paul
> 
> > > Date: Sat, 20 Jun 2009 14:11:32 -0400
> > > From: paul at xelerance.com
> > > To: blass_sgv at hotmail.com
> > > CC: users at openswan.org
> > > Subject: RE: [Openswan Users] Openswan/xl2tpd issue with nated roadwarriors
> > >
> > > On Sat, 20 Jun 2009, Sebastian Gomez Velasco wrote:
> > >
> > > > Hi Paul, thanks for the reply.
> > > >
> > > > About bug #1004, I'm not getting this error:  "cannot respond to IPsec SA request because no connection is known for......."
> > > > like said in https://gsoc.xelerance.com/issues/1004
> > >
> > > That part was fixed, but the policies are still not entirely correct on openswan 2.6.x. Please use 2.4.14.
> > >
> > > > I tried with transport mode, but I got the same messages, except in /var/log/secure, where IPSec SA changed from "tunnel" to
> > > > "transport"
> > >
> > > That's how it is supposed to be.
> > >
> > > You can see the policy is wrong using "ip xfrm pol" and "ip xfrm state". You'll notice that port 1701 is no
> > > where to be found in the policy anymore on openswan 2.6.x.
> > >
> > > Paul
> > 
> > _______________________________________________________________________________________________________________________________________
> > Explore the seven wonders of the world Learn more!
> >

_________________________________________________________________
Invite your mail contacts to join your friends list with Windows Live Spaces. It's easy!
http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20090620/f89170d6/attachment-0001.html