[Openswan Users] 2.6.23 vs kernel 2.6.29 - ipsec not exit
Szél Gábor
quash at quash.hu
Wed Oct 7 07:08:31 EDT 2009
Dear all,
I have a problem, i want use openswan 2.6.23 on Ubuntu 9.04 X64 Server.
I download openswan source, and make ipsec module (if i compille module,
and make ipsec programs, i use: export KLIPSCOMPILE="-m64
-mno-red-zones", export USER_COMPILE="-m64".
If I start ipsec witch ipsec init.d script or ipsec command, ipsec
started and not quit. When i look syslog and other logs, ipsec starting
normaly. if i press ctrl-c ipsec runing.
Oct 7 13:02:07 BeLa ipsec_setup: Starting Openswan IPsec 2.6.23...
Oct 7 13:02:07 BeLa ipsec_setup: Using KLIPS/legacy stack
Oct 7 13:02:07 BeLa ipsec_setup: KLIPS debug `none'
Oct 7 13:02:07 BeLa ipsec_setup: KLIPS ipsec0 on eth0
x.x.x.x/255.255.255.192 broadcast x.x.x.x
Oct 7 13:02:07 BeLa kernel: [ 1844.171555]
Oct 7 13:02:07 BeLa pluto: adjusting ipsec.d to /etc/ipsec.d
Oct 7 13:02:07 BeLa ipsec_setup: ...Openswan IPsec started
Oct 7 13:02:07 BeLa ipsec__plutorun: 002 added connection description
"xxx"
Oct 7 13:02:07 BeLa ipsec__plutorun: 002 added connection description
"xxx"
Oct 7 13:02:07 BeLa ipsec__plutorun: 002 added connection description
"xxx"
Oct 7 13:02:07 BeLa ipsec__plutorun: 002 added connection description
"xxx"
Oct 7 13:02:07 BeLa ipsec__plutorun: 002 added connection description
"xxx"
Oct 7 13:02:07 BeLa ipsec__plutorun: 104 "xxx" #1: STATE_MAIN_I1: initiate
Oct 7 13:02:07 BeLa ipsec__plutorun: 104 "xxx" #2: STATE_MAIN_I1: initiate
Oct 7 13:02:07 BeLa ipsec__plutorun: 104 "xxx" #3: STATE_MAIN_I1: initiate
Oct 7 13:02:07 BeLa ipsec__plutorun: 104 "xxx" #4: STATE_MAIN_I1: initiate
ipsec auto --status output is normal
and:
# ipsec setup --status
IPsec stopped
but...
has /var/run/pluto/ipsec.info file!
An normal Pluto is active?
some (5) eroutes exist!
ipsec and pluto runing!
i use ipsec with KLIPS
# cat /etc/ipsec.conf
version 2.0
# ------------------------------------
# basic configuration
config setup
interfaces="ipsec0=eth0"
#plutoload=%search
#plutostart=%search
uniqueids=yes
# ------------------
nat_traversal=no
oe=off
protostack=klips
virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
# ---- logs -----
# --- debug ------
plutodebug=all
klipsdebug=none
plutostderrlog=/tmp/pluto.log
....... (tunels config)
if i change protostack to netkey, ipsec starting normaly,
What is the problem ? if i on klips and pluto debug message, i dont show
critical errors.
I test other kernel version, not working.
----
regards
Gábor Szél
More information about the Users
mailing list