[Openswan Users] Determing connection name
nick at howitts.co.uk
Thu May 28 03:01:06 EDT 2015
I don't think you see the correct conn name until Quick Mode is
negotiated. In Main Mode it can pick any valid conn name to match
against. If you are using "auto=add" in your conn, it should route
automatically. This looks more like a configuration error with a failed
negotiation rather than a failure to route.
On 2015-05-28 01:40, Jesse N Perez wrote:
> I'm looking for a way to determine the connection name that I can use
> in a call to "ipsec auto --route <conn-name>" for a gateway.conf using
> When I do a "ipsec auto --status | grep 10.107.76.160" I get...
> 000 "gateway-conn":
> 10.60.87.6<10.60.87.6>[+S=C]...10.107.76.160[+S=C]; unrouted; eroute
> owner: #0
> 000 #34977: "gateway-conn" 10.107.76.160:500 STATE_MAIN_R2
> (sent MR2, expecting MI3); EVENT_RETRANSMIT in 19s; lastdpd=-1s(seq
> in:0 out:0); idle; import:not set
> and see its unrouted. Note the conn-name is shown as
> gateway-conn where 4682 is the index number pluto must have
> chosen for this connection.
> So if I want to route this connection using "ipsec auto --route
> <conn-name>" how can I find the connection name?
> Jesse N. Perez
> Users at lists.openswan.org
> Micropayments: https://flattr.com/thing/38387/IPsec-for-Linux-made-easy
> Building and Integrating Virtual Private Networks with Openswan:
More information about the Users