From: Andreas Steffen (andreas.steffen_at_strongsec.net)
Date: Wed Jul 31 2002 - 14:01:04 CEST
It seems that an old connection #122 did not get unrouted so that
the new one could not be routed because the eroute was still
established. Was it both times the same user logging in with IP
193.101.100.149 and what time interval elapsed between IPsec SA #122
and IPsec SA #712?
Regards
Andreas
norbert wrote:
> Hello,
> we are using FreeS/WAN Version 1.97 including X.509 patch (Version
> 0.9.12).
> It works fine for our roadwarriors - nearly always.
> Today one of our roadwarriors did not get his connection up. In the
> servers /var/log/messagers file I found the following Pluto messages,
> where 193.101.100.149 is the ip of the roadwarrior:
>
> Jul 30 13:56:21 lnxe Pluto[16164]: | route owner of "rest" CK_INSTANCE
> unrouted: "rest" CK_INSTANCE erouted; eroute owner: "rest" CK_INSTANCE
> erouted
> Jul 30 13:56:21 lnxe Pluto[16164]: "rest" 193.101.100.149 #712: cannot
> install eroute -- it is in use for "rest" 193.101.100.149 #122
> Jul 30 13:56:21 lnxe Pluto[16164]: | state transition function for
> STATE_QUICK_R0 had internal error
> Jul 30 13:56:21 lnxe Pluto[16164]: | next event EVENT_SO_DISCARD in 0
> seconds for #712
>
> An ipsec setup restart solved the problem, that I suppose, there is no
> configuration problem.
> I would like to help tracking this problem down. Which information is
> needed?
>
> Norbert
>
>
-- ====================================================================== Andreas Steffen e-mail: andreas.steffen_at_strongsec.com strongSec GmbH phone: +41 76 340 25 56 Alter Zürichweg 20 home: http://www.strongsec.com CH-8952 Schlieren (Switzerland) ==========================================[strong internet security]==_______________________________________________ Users mailing list Users_at_lists.freeswan.org http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.4 : Mon Aug 05 2002 - 21:01:34 CEST