[Openswan Users] no public interfaces found on 2.6.37

Ozai ozai.tien at gmail.com
Wed Apr 18 06:21:26 EDT 2012


Dear Sirs,

I merged the openswan(2.6.37) into embedded linux(2.6.30 mips).When I started the ipsec.I got the error message 'no public interfaces found' as below.Please help,how can I solve this question.thank's. 

Best Regards,
Ozai

# cat ipsec.conf

config setup
        dumpdir=/var/run/pluto/
        interfaces=ipsec0=ppp0.1
        oe=off
        protostack=klips

conn %default
                keyexchange=ike
                ike=3des-md5-modp1024
                esp=3des-md5
                auth=esp
                type=tunnel
                authby=secret
                auto=start

conn sample
                left=111.243.154.145
                leftsubnet=192.168.1.0/24
                right=111.243.154.196
                rightsubnet=192.168.2.0/24
=====================================================
# cat ipsec.secrets
111.243.154.145 111.243.154.196 : PSK "12345"
========================================================
Jan  1 00:44:31 daemon err ipsec_setup: Starting Openswan IPsec 2.6.37...
Jan  1 00:44:31 daemon err ipsec_setup: head: invalid option -- 1
Jan  1 00:44:31 daemon err ipsec_setup: BusyBox v1.17.2 (2012-04-18 12:40:34 CST) multi-call binary.
Jan  1 00:44:31 daemon err ipsec_setup: Usage: head [OPTIONS] [FILE]...
Jan  1 00:44:31 daemon err ipsec_setup: Print first 10 lines of each FILE (or stdin) to stdout.
Jan  1 00:44:31 daemon err ipsec_setup: With more than one FILE, precede each with a filename header.
Jan  1 00:44:31 daemon err ipsec_setup: Options:
Jan  1 00:44:31 daemon err ipsec_setup:  -n N[kbm] Print first N lines
Jan  1 00:44:31 daemon err ipsec_setup: N may be suffixed by k (x1024), b (x512), or m (x1024^2).
Jan  1 00:44:31 daemon err ipsec_setup: head: invalid option -- 1
Jan  1 00:44:31 daemon err ipsec_setup: BusyBox v1.17.2 (2012-04-18 12:40:34 CST) multi-call binary.
Jan  1 00:44:31 daemon err ipsec_setup: Usage: head [OPTIONS] [FILE]...
Jan  1 00:44:31 daemon err ipsec_setup: Print first 10 lines of each FILE (or stdin) to stdout.
Jan  1 00:44:31 daemon err ipsec_setup: With more than one FILE, precede each with a filename header.
Jan  1 00:44:31 daemon err ipsec_setup: Options:
Jan  1 00:44:31 daemon err ipsec_setup:  -n N[kbm] Print first N lines
Jan  1 00:44:31 daemon err ipsec_setup: N may be suffixed by k (x1024), b (x512), or m (x1024^2).
Jan  1 00:44:31 daemon err ipsec_setup: [: 1000: unknown operand
Jan  1 00:44:31 daemon err ipsec_setup: Using KLIPS/legacy stack
Jan  1 00:44:32 daemon err ipsec_setup: KLIPS debug `none'
Jan  1 00:44:33 daemon err ipsec_setup: KLIPS ipsec0 on ppp0.1 111.243.154.145/ pointtopoint 168.95.98.254/32 mtu 1492
Jan  1 00:44:33 daemon err ipsec_setup: ipsec0 -> NULL mtu=0(0) -> 0
Jan  1 00:44:33 authpriv err ipsec__plutorun: Starting Pluto subsystem...
Jan  1 00:44:34 user warn syslog: adjusting ipsec.d to /var/ipsec.d
Jan  1 00:44:34 daemon err ipsec__plutorun: adjusting ipsec.d to /var/ipsec.d
Jan  1 00:44:34 authpriv warn pluto[2139]: LEAK_DETECTIVE support [disabled]
Jan  1 00:44:34 authpriv warn pluto[2139]: OCF support for IKE [disabled]
Jan  1 00:44:34 authpriv warn pluto[2139]: NSS support [disabled]
Jan  1 00:44:34 authpriv warn pluto[2139]: HAVE_STATSD notification support not compiled in
Jan  1 00:44:34 authpriv warn pluto[2139]: Setting NAT-Traversal port-4500 floating to off
Jan  1 00:44:34 authpriv warn pluto[2139]:    port floating activation criteria nat_t=0/port_float=1
Jan  1 00:44:34 authpriv warn pluto[2139]:    NAT-Traversal support  [disabled]
Jan  1 00:44:34 authpriv warn pluto[2139]: using /dev/urandom as source of random entropy
Jan  1 00:44:34 authpriv warn pluto[2139]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
Jan  1 00:44:34 authpriv warn pluto[2139]: starting up 1 cryptographic helpers
Jan  1 00:44:34 authpriv warn pluto[2144]: using /dev/urandom as source of random entropy
Jan  1 00:44:34 daemon err ipsec_setup: ...Openswan IPsec started
Jan  1 00:44:34 authpriv warn pluto[2139]: started helper pid=2144 (fd:6)
Jan  1 00:44:34 authpriv warn pluto[2139]: Using KLIPS IPsec interface code on 2.6.30
Jan  1 00:44:34 authpriv warn pluto[2139]: Could not change to directory '/var/ipsec.d/cacerts': /var/run/pluto
Jan  1 00:44:34 authpriv warn pluto[2139]: Could not change to directory '/var/ipsec.d/aacerts': /var/run/pluto
Jan  1 00:44:34 authpriv warn pluto[2139]: Could not change to directory '/var/ipsec.d/ocspcerts': /var/run/pluto
Jan  1 00:44:34 authpriv warn pluto[2139]: Could not change to directory '/var/ipsec.d/crls'
Jan  1 00:44:34 authpriv warn pluto[2139]: added connection description "sample"
Jan  1 00:44:34 daemon err ipsec__plutorun: 002 added connection description "sample"
Jan  1 00:44:34 authpriv warn pluto[2139]: listening for IKE messages
Jan  1 00:44:34 authpriv warn pluto[2139]: no public interfaces found
Jan  1 00:44:34 daemon err ipsec__plutorun: 003 no public interfaces found
Jan  1 00:44:34 authpriv warn pluto[2139]: loading secrets from "/var/ipsec.secrets"
Jan  1 00:44:34 daemon err ipsec__plutorun: 022 "sample": we cannot identify ourselves with either end of this connection
Jan  1 00:44:35 authpriv warn pluto[2139]: "sample": We cannot identify ourselves with either end of this connection.
Jan  1 00:44:35 daemon err ipsec__plutorun: 022 "sample": We cannot identify ourselves with either end of this connection.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.openswan.org/pipermail/users/attachments/20120418/7cc7b750/attachment.html>


More information about the Users mailing list