[Openswan Users] Query about "interfaces" with NETKEY

Nick Howitt n1ck.h0w1tt at gmail.com
Fri Oct 16 09:51:13 EDT 2009


Hi,

Reading the ipsec.conf manual, it says that with NETKEY it says 
interfaces=%none must be used. I've been using interfaces=%defaultroute 
up to now with no problems. When I changed it to %none and restarted 
ipsec, i got the following errors in /var/log/messages:

Oct 16 14:37:46 server ipsec__plutorun: 022 connection must specify host 
IP address for our side
Oct 16 14:37:46 server ipsec__plutorun: 037 attempt to load incomplete 
connection
Oct 16 14:37:46 server ipsec__plutorun: 022 connection must specify host 
IP address for our side
Oct 16 14:37:46 server ipsec__plutorun: 037 attempt to load incomplete 
connection

and in /var/log/secure:

Oct 16 14:38:49 server pluto[7423]: connection must specify host IP 
address for our side
Oct 16 14:38:49 server pluto[7423]: attempt to load incomplete connection

and my tunnels failed to come up.

In my conns I use left=%defaultroute.

Am I correct in assuming the manual is incorrect and 
interfaces=%defaultroute is valid with NETKEY?

Regards,

Nick


More information about the Users mailing list