[Openswan Users] ESPINUDP

[Paul Wouters]

On Mon, 12 Apr 2010, Cameron Childress wrote:

> Hey everyone.I'm trying to set up openswan on ubuntu 9.10 and can't get UDP encapsulation to work.
> I found this in my logs:
> "Apr 11 23:36:19 mufasa ipsec_setup: Stopping Openswan IPsec...
> Apr 11 23:36:20 mufasa ipsec_setup: ...Openswan IPsec stopped
> Apr 11 23:36:20 mufasa ipsec_setup: Starting Openswan IPsec U2.6.22/K2.6.31-20-generic-pae...
> Apr 11 23:36:20 mufasa ipsec_setup: Using NETKEY(XFRM) stack
> Apr 11 23:36:20 mufasa ipsec__plutorun: adjusting ipsec.d to /etc/ipsec.d
> Apr 11 23:36:20 mufasa ipsec_setup: ...Openswan IPsec started
> Apr 11 23:36:20 mufasa ipsec__plutorun: 002 added connection description "rw-win"
> Apr 11 23:36:20 mufasa ipsec__plutorun: 002 added connection description "rw-mac"
> Apr 11 23:36:20 mufasa ipsec__plutorun: 002 added connection description "roadwarrior"
> Apr 11 23:36:20 mufasa ipsec__plutorun: 003 NAT-Traversal: Trying new style NAT-T
> Apr 11 23:36:20 mufasa ipsec__plutorun: 003 NAT-Traversal: ESPINUDP(1) setup failed for new style NAT-T family IPv4 (errno=19)
> Apr 11 23:36:20 mufasa ipsec__plutorun: 003 NAT-Traversal: Trying old style NAT-T"

That's fine. You are using NETKEY. The log messages are a little confusing, but it is working.

Paul