[Users] cannot start ipsec tunnel

From: Chris Price (cprice_at_its.to)
Date: Mon Nov 04 2002 - 23:08:58 CET


        Having problems connection two Freeswan 1.98b systems in a
net-to-net config;

        I get the following message in syslog;

Nov 4 15:08:00 firewall pluto[17913]: "cp-wni": route-client
output: RTNETLINK answers: Network is unreachable
Nov 4 15:08:00 firewall pluto[17913]: "cp-wni": route-client output:
/lib/ipsec/_updown: `ip route add 192.168.210.0/24 dev ipsec0 via
142.170.220.1' failed
Nov 4 15:08:00 firewall pluto[17913]: "cp-wni": route-client command
exited with status

        Ring any bells with anyone? My ipsec.conf, ipsec.secrets (edited
to protect the innocent) are included inline. Due to the sensitivity of
the ipsec.barf output, I'll not attach it here, but will send to anyone
who thinks they can help.

        ipsec.conf;

conn cp-wni
        authby=secret
        # Left security gateway, subnet behind it, next hop toward right.
        right=68.145.1xx.84
        rightsubnet=192.168.210.0/24
        rightnexthop=68.145.1xx.1
        # Right security gateway, subnet behind it, next hop toward left.
        left=142.179.2xx.244
        leftsubnet=192.168.1.0/24
        leftnexthop=142.179.2xx.1
        # To authorize this connection, but not actually start it, at
startup,
        # uncomment this.
        auto=add

        ipsec.secrets

68.145.1xx.84 142.179.2xx.244: PSK "<some big long honkin shared secret>"

        Cheers

        Chris

_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users



This archive was generated by hypermail 2.1.5 : Tue Nov 05 2002 - 05:20:44 CET