From: Norbert Wegener (nw_at_sbs.de)
Date: Wed Jul 31 2002 - 14:52:01 CEST
Andreas Steffen wrote:
>
> It seems that an old connection #122 did not get unrouted so that
> the new one could not be routed because the eroute was still
> established. Was it both times the same user logging in with IP
> 193.101.100.149 and what time interval elapsed between IPsec SA #122
> and IPsec SA #712?
No, it was not the same user. The logs show, that #122 had been
established the evening before:
Jul 29 20:39:46 lnxe Pluto[16164]: "rest" 193.101.100.149 #122: IPsec SA
established
Norbert
>
> Regards
>
> Andreas
>
> norbert wrote:
> > Hello,
> > we are using FreeS/WAN Version 1.97 including X.509 patch (Version
> > 0.9.12).
> > It works fine for our roadwarriors - nearly always.
> > Today one of our roadwarriors did not get his connection up. In the
> > servers /var/log/messagers file I found the following Pluto messages,
> > where 193.101.100.149 is the ip of the roadwarrior:
> >
> > Jul 30 13:56:21 lnxe Pluto[16164]: | route owner of "rest" CK_INSTANCE
> > unrouted: "rest" CK_INSTANCE erouted; eroute owner: "rest" CK_INSTANCE
> > erouted
> > Jul 30 13:56:21 lnxe Pluto[16164]: "rest" 193.101.100.149 #712: cannot
> > install eroute -- it is in use for "rest" 193.101.100.149 #122
> > Jul 30 13:56:21 lnxe Pluto[16164]: | state transition function for
> > STATE_QUICK_R0 had internal error
> > Jul 30 13:56:21 lnxe Pluto[16164]: | next event EVENT_SO_DISCARD in 0
> > seconds for #712
> >
> > An ipsec setup restart solved the problem, that I suppose, there is no
> > configuration problem.
> > I would like to help tracking this problem down. Which information is
> > needed?
> >
> > Norbert
> >
> >
>
> --
> ======================================================================
> Andreas Steffen e-mail: andreas.steffen_at_strongsec.com
> strongSec GmbH phone: +41 76 340 25 56
> Alter Zürichweg 20 home: http://www.strongsec.com
> CH-8952 Schlieren (Switzerland)
> ==========================================[strong internet security]==
-- Norbert Wegener Phone:(49)2012661379 Fax:(49)2012661377 SBS Essen,Germany Mail: nw_at_sbs.de Mailfax:(49)2018165521379 CA Cert: http://w4.siemens.de/de2/flash/digital_id/digital_id.html
_______________________________________________ Users mailing list Users_at_lists.freeswan.org http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.4 : Mon Aug 05 2002 - 21:01:34 CEST