[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openswan-users
Subject:    Re: [Openswan Users] Problem with interface ipsec0
From:       Paul Wouters <paul () xelerance ! com>
Date:       2010-07-25 16:59:39
Message-ID: alpine.LFD.1.10.1007251259020.32467 () newtla ! xelerance ! com
[Download RAW message or body]

On Fri, 23 Jul 2010, Stephan Mischnick (Prima - Systemtechnik) wrote:

> we try to use klips with ipsec0 as interface
> (linux-2.6.33.6/openswan-2.6.27 klips only with kpatch). Configuration
> is okay so far, tunnels are established but it is not possible
> to transmit pakets
>
> bohr:/home/smi # /usr/local/sbin/ipsec eroute
> 0          10.22.0.0/16       -> 10.21.0.0/16       => %trap
> 0          10.22.0.0/16       -> 10.23.0.0/16       => %trap
> ...
>
> a ping to e.g. 10.21.1.1 results in
>
> PING 10.21.1.1 (10.21.1.1) 56(84) bytes of data.
> ping: sendmsg: Invalid argument

The tunnels are in %trap mode, they are not established. Check your logs for
the errors, but this is likely a misconfiguration.

Paul

[prev in list] [next in list] [prev in thread] [next in thread]