[Openswan Users] need some help to configure openswan on net tonet

Paul Wouters paul at xelerance.com
Fri Sep 18 11:45:46 EDT 2009


On Fri, 18 Sep 2009, reza wrote:

> I always can't establish an ipsec tunnel between two linux box. No firewall, and this is my conf on two side:

> Sep 18 09:40:30 octi pluto[31206]: "zola-octi" #4: ERROR: netlink response for Add SA comp.a5b0 at 88.191.89.113 included errno 22: Invalid argument

Do you have a very short rekey time? Does ip xfrm state show many entries?
Do both sides have the ipcomp kernel module loaded?

If that does not help, try adding compress=no to both ends and let us know
if that helps.

Paul


More information about the Users mailing list