[prev in list] [next in list] [prev in thread] [next in thread] 

List:       strongswan-users
Subject:    Re: [strongSwan] cannot start ipsec...
From:       Andreas Steffen <andreas.steffen () strongswan ! org>
Date:       2008-07-25 11:04:01
Message-ID: 4889B321.7060506 () strongswan ! org
[Download RAW message or body]

Hi,
the problem is your routing table. The command

  ip route list

will show multiple default route entries. You must either
delete all but one of these default entries or define
leftnexthop= in ipsec.conf explicitly.

Best regards

Andreas

danny dan wrote:
> Starting strongSwan 4.2.4 IPsec [starter]...
> multiple default routes - cannot cope with %defaultroute!!!
> 
> what is the problems with my configuration..
> 
> # Add connection here.
> conn rw
>  auth=esp
>  authby=rsasig
>  compress=no
>  dpdaction=none
>  ikelifetime=3h
>  keyexchange=ike
>  keyingtries=%forever
>  keylife=1h
>  rekey=yes
>  type=tunnel
>      left=219.93.36.214
>      leftsubnet=219.93.36.192/26
>      leftcert=/etc/ssl/certs/strongswanCert.pem
>      right=%any
>      auto=add
> ca strongswan
>    cacert=vpnserverCert.pem
>    crluri=http://cr12.strongswan.org/strongswan.crl
>    auto=add
> 
> 
> for your information my network structure is like this...
> 
>                  strongswan networks------------------strongswan
> server================roadwarriors.
> 
> ipaddress=219.93.36.xxx
> ipaddress:192.168.1.xxx
> 
> gateway=219.93.36.xxx
> _______________________________________________
> Users mailing list
> Users@lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

-- 
======================================================================
Andreas Steffen                         andreas.steffen@strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==
_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users
[prev in list] [next in list] [prev in thread] [next in thread]