[Openswan Users] IPv6 and road warrior

Maciej Gałkiewicz maciejgalkiewicz at ragnarson.com
Thu Mar 10 06:48:07 EST 2011


I would like to encrypt traffic between "a" and "b". "A" has
configuration which accepts road warriors:

conn a-b
        left=2a01:dead:beaf:3ffd:d20d:52ff:fef7:941
        right=%any
        rightid=@b
        leftrsasigkey=0sAw...
        rightrsasigkey=0sAw...
        type=transport
        connaddrfamily=ipv6
        auto=add

"B" is a road warrior:

conn a-b
        right=2a01:dead:beaf:3ffd:d20d:52ff:fef7:941
        left=%defaultroute
        leftid=@b
        leftrsasigkey=0sAw...
        rightrsasigkey=0sAw...
        type=transport
        connaddrfamily=ipv6
        auto=start

"A" does not seem to listen on appropriate IP address:
# netstat -tunlp
udp6       0      0 2a01:dead:beaf:3ffd:d:500 :::*
           10762/pluto

In "b" logs I have:
ipsec__plutorun: 003 ERROR: "a-b" #2: sendto on eth0 to
2a01:dead:beaf:3ffd:d20d:52ff:fef7:941:500 failed in main_outI1. Errno
97: Address family not supported by protocol

How to fix this issue?

regards
Maciej


More information about the Users mailing list