Hi,<br><br>I'm having trouble setting up a openswan (openswan-2.6.32-10.el6_2.x86_64) on Centos 6.2 (64-bit) (installed using centos default repo).<br><br>This is the output I see when starting:<br><br>[root@localhost ~]# service ipsec start<br>
ipsec_setup: Starting Openswan IPsec U2.6.32/K3.2.14...<br>ipsec_setup: /usr/libexec/ipsec/addconn Not able to open /proc/sys/crypto/fips_enabled, returning non-fips mode<br><br>Additionally I can't seem to solve the [failed]'s in ipsec verify:<br>
<br>[root@localhost ~]# ipsec verify #(OKs edited out)<br>Checking your system to see if IPsec got installed and started correctly: <br>... [OK]<br> SAref kernel support [N/A]<br>
...<br> Pluto listening for NAT-T on udp 4500 [FAILED]<br>Two or more interfaces found, checking IP forwarding [FAILED]<br>...<br><br>What's worse is I don't know what issue if any is a fail point, or if they're simply warning-ish fails, where I can safely proceed.<br>
<br>Environment context:<br>2 servers cento6.2-x64 with mirrored setup<br>Currently both servers are right next to each other, but eventually
they'll be at two different geographical locations, not nat'ed eth0
public facing, eth1 internal.<br>eth0 (192.168.5.[110,120]) -> router -> internet<br>eth1 (10.0.5.[110,120]) -> directly connected to each other (crossover)<br>openswan-2.6.32-10.el6_2.x86_6<br>end-goal: l2tpv3 tunnel over ipsec<br>
ipsec familiarity=nil :-[<br><br>