[Openswan Users] Configure Route-Based Unsuccessfully

[Patrick Naubert]

Rescued from the spam bucket.  Please remember to subscribe to the mailing list before posting to it.


From: "Alex.S" <alex.sh at foxmail.com>
Subject: Configure Route-Based Unsuccessfully
Date: June 25, 2015 at 12:04:58 PM EDT
To: "users" <users at lists.openswan.org>


I use "yum" to install openswan(version 2.6.32). And use "make" to install 2.6.32's klips.
I also try to use "make" tar.bz to install both openswan and klips. But the result is same with it.

I found when i exec "service ipsec start". My network will be down.And the ipsec0 is same as my eth0(only netmask is 255.255.255.255).Two more route is 0.0.0.0/0 128.0.0.0/0 via ipsec0.

Could i edit ipsec0 by ipsec.conf or other config files?

this is my ipsec.conf
version 2.0 
config setup
dumpdir=/var/run/pluto/
nat_traversal=yes
oe=off
protostack=klips
interfaces="ipsec0=eth0"
conn c2hk
ike=3des-md5
authby=secret
phase2=esp
phase2alg=3des-md5
compress=no
left=A.A.A.A
leftsubnet=0.0.0.0/0
right=B.B.B.B
rightsubnet=0.0.0.0/0
auto=route

My ipsec0's address is A.A.A.A,but i want it be 172.16.1.1/30.

Anybody knows how to do or have some documents?
Please help me, thanks.



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openswan.org/pipermail/users/attachments/20150625/8c50d9a0/attachment.html>