From: Sam Sgro (sam_at_freeswan.org)
Date: Wed Nov 27 2002 - 17:04:26 CET
-----BEGIN PGP SIGNED MESSAGE-----
On Wed, 27 Nov 2002, Stanley Tan wrote:
> Nov 27 20:49:52 localhost ipsec_setup: KLIPS ipsec0 on eth0 202.184.1.233/255.255.255.224 broadcast 202.184.1.255
> Nov 27 20:49:52 localhost ipsec_setup: ...FreeS/WAN IPsec started
> Nov 27 20:49:53 localhost ipsec__plutorun: 003 "bun-digi": route-client command exited with status 7
> Nov 27 20:49:53 localhost ipsec__plutorun: 025 "bun-digi": could not route
> Nov 27 20:49:53 localhost ipsec__plutorun: ...could not route conn "bun-digi"
> Nov 27 20:51:04 localhost ipsec__plutorun: 104 "bun-digi" #1: STATE_MAIN_I1: initiate
> Nov 27 20:51:04 localhost ipsec__plutorun: 106 "bun-digi" #1: STATE_MAIN_I2: sent MI2, expecting MR2
> Nov 27 20:51:04 localhost ipsec__plutorun: 108 "bun-digi" #1: STATE_MAIN_I3: sent MI3, expecting MR3
> Nov 27 20:51:04 localhost ipsec__plutorun: 004 "bun-digi" #1: STATE_MAIN_I4: ISAKMP SA established
> Nov 27 20:51:04 localhost ipsec__plutorun: 112 "bun-digi" #2: STATE_QUICK_I1: initiate
> Nov 27 20:51:04 localhost ipsec__plutorun: 003 "bun-digi" #2: route-client command exited with status 7
We've tried to route the connection as you've defined it, but we've failed for
some reason. Typically, it's because your "nexthop" is not actually accessible
on your network.
Check your configuration details. Have you defined the appropriate "nexthop"
variable? (Even by using "interfaces=%defaultroute"/"left=%defaultroute") You
should be able to turn plutodebugging to "all" to see the route command that's
failing.
You can read the FAQ for more info.
- --
Sam Sgro
sam_at_freeswan.org
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv
Comment: For the matching public key, finger the Reply-To: address.
iQCVAwUBPeTtC0OSC4btEQUtAQGAgAP/e/a70zOWhuUiCjSn/EQPgQBBCI9ifHq+
ur25ehjIkwHck9soNZpBaOMEVGZZ/ZeRvo1pvn83w6v6PPjkJavLCqkIq4FFJqXT
5PFDy54Vt0xzsAeOs3jEVF9iolbT0G79d5h0ClT/cbWVFA75xqVfsq1tFaYtvupg
ffTdMt4gCAE=
=aTvl
-----END PGP SIGNATURE-----
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.5 : Thu Nov 28 2002 - 05:20:53 CET