[Openswan Users] Error "No such device"

[Paul Wouters]

On Thu, 7 Apr 2011, ??????? ?????? wrote:

> 172.16.224.1/255.255.255.255 pointopoint 10.64.64.64
> Apr  7 15:03:45 internet ipsec_setup: KLIPS ipsec2 on ppp0
> 172.16.224.1/255.255.255.255 pointopoint 10.64.64.64
> Apr  7 15:03:45 internet ipsec_setup: /usr/lib/ipsec/tncfg: Socket ioctl
> failed on attach -- No such device.  Is the virtual device valid?  Is the
> ipsec module linked into the kernel or loaded as a module?

> interfaces="ipsec0=ppp0" and the ppp0 interface is currently not present?'
> I have double-checked presence of ppp0 interface - it is up and running. I
> start it manually and check it by reviewing WEB interfaces of remote devices
> just before starting /etc/init.d/ipsec. So it is not an issue.

If the ppp0 device is removed and added it is no longer attached to ipsec0.
The best way of fixing this is to put something in your ppp updown scripts
like:

ipsec tncfg --detach --virtual ipsec0
ipsec tncfg --attach --virtual ipsec0 --physical ppp0

I believe another method that might address this is using interfaces="%ppp0"

> ip xfrm show
> shows nothing.

That will never show anything when using klips, as it is only for use with
NETKEY/XFRM, not KLIPS.

Paul