From: Sam Sgro (sam_at_freeswan.org)
Date: Tue Nov 12 2002 - 01:31:02 CET
-----BEGIN PGP SIGNED MESSAGE-----
On Mon, 11 Nov 2002, George Gallen wrote:
> Nov 11 15:30:50 swede1 ipsec_setup: Starting FreeS/WAN IPsec 1.98b...
> Nov 11 15:30:51 swede1 ipsec_setup: Using
> /lib/modules/2.4.7-10/kernel/net/ipsec
> /ipsec.o
> Nov 11 15:30:51 swede1 kernel: klips_info:ipsec_init: KLIPS startup,
> FreeS/WAN I
> PSec version: 1.98b
> Nov 11 15:30:51 swede1 ipsec_setup: KLIPS debug `none'
> Nov 11 15:30:53 swede1 ipsec_setup: KLIPS ipsec0 on eth1
> 192.168.1.200/255.255.2
> 55.0 broadcast 192.168.1.255
> Nov 11 15:30:53 swede1 ipsec_setup: ...FreeS/WAN IPsec started
> Nov 11 15:30:56 swede1 ipsec__plutorun: 022 "swede1-to-data1": we have no
> ipsecN
> interface for either end of this connection
We've parsed the "swede-to-data1" connection, and cannot find a IP address as
either "left" or "right" that actually represents us as a host.
This isn't surprising; you've edited out the real IPs, but I do see the ipsec0
interface above is bound to a NAT'ted IP address. You likely don't have your
"interfaces" line configured properly for your setup, or the conn is
not properly configured for what you are trying to achieve.
Draw a network diagram; from your values for "leftnexthop" - which represents
left's next hop towards the peer, right - it looks as if you could be trying
to secure two networks across a non-routeable subnet (as opposed to the 'net).
Mayhaps this is a configuration error.
- --
Sam Sgro
sam_at_freeswan.org
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: For the matching public key, finger the Reply-To: address.
iQCVAwUBPdBLyEOSC4btEQUtAQHYCwQAo+f7827vHjaHgPBwVeViSmbr6RtZ8LeJ
umBDZ0pGxvrwCSJvCdOz8qT2dHI936imBImDl4o7TIWJwwWvoehZLPwYwaJoIA6H
FHti5ssS6zPRK2HgqLheREw359qQecc821e8jO8g2BahQASSMqHxI0naK2m4Aj5N
Hpm23gjFW5w=
=gE2o
-----END PGP SIGNATURE-----
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.5 : Tue Nov 12 2002 - 05:20:38 CET