[Openswan Users] Problem with interface ipsec0

[Paul Wouters]

On Fri, 23 Jul 2010, Stephan Mischnick (Prima - Systemtechnik) wrote:

> we try to use klips with ipsec0 as interface
> (linux-2.6.33.6/openswan-2.6.27 klips only with kpatch). Configuration
> is okay so far, tunnels are established but it is not possible
> to transmit pakets
>
> bohr:/home/smi # /usr/local/sbin/ipsec eroute
> 0          10.22.0.0/16       -> 10.21.0.0/16       => %trap
> 0          10.22.0.0/16       -> 10.23.0.0/16       => %trap
> ...
>
> a ping to e.g. 10.21.1.1 results in
>
> PING 10.21.1.1 (10.21.1.1) 56(84) bytes of data.
> ping: sendmsg: Invalid argument

The tunnels are in %trap mode, they are not established. Check your logs for
the errors, but this is likely a misconfiguration.

Paul