[prev in list] [next in list] [prev in thread] [next in thread] 

List:       strongswan-users
Subject:    Re: [strongSwan] Problems connecting to Strongswan with WP8.1
From:       Noel Kuntze <noel () familie-kuntze ! de>
Date:       2014-10-19 11:26:18
Message-ID: 54439FDA.4040602 () familie-kuntze ! de
[Download RAW message or body]


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Nickola,

You need to either have your own kernel on the host or use userspace processing of \
IPsec traffic. So either switch from a container VM to a paravirtual VM or hardware \
virtualized VM, like KVM or XEN based or use libipsec. See [1].

[1] https://wiki.strongswan.org/projects/strongswan/wiki/Kernel-libipsec

Mit freundlichen Grüßen/Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 19.10.2014 um 13:23 schrieb Nickola Kolev:
> On Sat, 18 Oct 2014 22:56:53 +0200
> "raceface" <raceface_the_one@gmx.net> wrote:
> 
> 
> [ cut ]
> > 00[DMN] Starting IKE charon daemon (strongSwan 5.2.0, Linux
> > 2.6.32-042stab092.3, i686)
> 
> This seems to be an OpenVZ virtual machine, hence the 2.6 kernel and
> 12.04 Ubuntu (which should use 3.2 kernel).
> 
> [ cut ]
> 
> > 00[KNL] unable to set IPSEC_POLICY on socket: Operation not permitted
> > 00[NET] installing IKE bypass policy failed
> > 00[KNL] unable to set IPSEC_POLICY on socket: Operation not permitted
> > 00[NET] installing IKE bypass policy failed
> > 00[KNL] unable to set IPSEC_POLICY on socket: Invalid argument
> > 00[NET] installing IKE bypass policy failed
> > 00[KNL] unable to set IPSEC_POLICY on socket: Invalid argument
> > 00[NET] installing IKE bypass policy failed
> 
> [ cut ]
> 
> I suspect that the virtual machine has some capabilities disabled.
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJUQ5/aAAoJEDg5KY9j7GZYgAAP/jUyhS8pddQofqkEXQ9vbhVw
WDu/oga5WR3jA6Mqz7KJzSvMrlwlcewym7sVR54ZX9vsp7JNuYW/tj6wKp6ZDIBJ
wUlTS9xuY939hVyZWGRbmUbF6UVZ3Zp2nnFDMXKRd/aIb30Pzu0lRqVS9jSQIBIl
xHXsexPw78p59TdjBnggv3rDplJsq6cW5ZZ6bVLe+jRYSGvLUv+O2Ee10/9onVLM
MoU/qNLQuzyR0WHS8sZPac2vAkr8uGy6SM0N5FEyljJA5H/9F5RRMUdhXuSN4oRI
PFZ5WFLYLc0F+Ncu7mdOmffm2hHB6MKJNCYDaNnA9H8bdpBjzPNrlviRiqw/wn7H
r+GGZJZin4og6pw1Q8E2q9aoES1J/HXDHEK13Wy8VU8GLrXJetE35QEG6QIM3gTH
MAag7R3+TkmTIZKj11oSn14k2H3X338HCBh0fWu1RBtFYSp9xNtgQLYs8SIQO3Vj
u8Ut9VlUryMHmRP37/02ph6Mm4GLORS3nlHbsx65LeDRhRNRFNY45ABbCjzR3W9Y
Ykl5LDkKts5Q74QZx9/o9TQOhWJzLhnPFhIxWnXPXbHu3xMFV7tANluZkAAIbnXZ
59O6E+/Jwlg+uOc6em/OvxI3Tu610CHgf3dSuLAyy4KbX0+CmpFJKSSaNb6yca+V
VYR6Gi45G/I3s/irbyAa
=JKa7
-----END PGP SIGNATURE-----

_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users


[prev in list] [next in list] [prev in thread] [next in thread]