[Openswan Users] klips and setkey

Paul Wouters paul at xelerance.com
Wed Mar 17 13:56:32 EDT 2010


On Wed, 17 Mar 2010, avital sela wrote:

> I recently built KLIPS stack to a 2.6.29.6 based kernel. The module
> loads fine but when I tried to use setkey to setup a tunnel manually

KLIPS uses the PFKEY interface, not the NETLINK/XFRM interface, so setkey
and other ipsec-tools utilities and the kernel XFRM utilities (ip xfrm)
do not work with these.

Instead, see "ipsec --help" for commands or look at /proc/net/ipsec/

Paul


More information about the Users mailing list