Problems initialising connection

"Martin Ferguson" <[email protected]>
Newsgroups gmane.network.freeswan.user
Message-ID <002d01c47ef5$265a0ea0$4bc809c0@SHETLAND>
Hi,

I am trying to tunnel a RedhatES box to a netgear fvs318.

When I start ipsec on the Redhat box, I get the following....

------------------
Aug 10 17:06:19 mailgate ipsec_setup: Starting FreeS/WAN IPsec 2.06...
Aug 10 17:06:19 mailgate ipsec_setup: modprobe: Can't locate module
xfrm_user
Aug 10 17:06:19 mailgate ipsec_setup: KLIPS ipsec0 on eth1
212.40.240.70/255.255.255.252 broadcast 212.20.240.71
Aug 10 17:06:19 mailgate ipsec_setup: ...FreeS/WAN IPsec started
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module ripemd160
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module cast128
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module lzs
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module lzjh
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module ripemd160
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module cast128
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module lzs
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module lzjh
Aug 10 17:06:19 mailgate ipsec__plutorun: 104 "gl-to-denv" #1:
STATE_MAIN_I1: initiate
Aug 10 17:06:19 mailgate ipsec__plutorun: ...could not start conn
"gl-to-denv"
------------------

ipsec whack --status
produces
000 interface lo/lo 127.0.0.1
000 interface eth0/eth0 192.168.2.1
000 interface eth1/eth1 212.40.240.70
000 %myid = (none)
000 debug none
000
000 "gl-to-denv":
192.168.2.0/24===212.40.240.70---212.40.240.69...212.40.240.69---64.207.87.8
5===192.168.1.0/24; prospective erouted; eroute owner: #0
000 "gl-to-denv":   ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s;
rekey_fuzz: 100%; keyingtries: 0
000 "gl-to-denv":   policy: PSK+ENCRYPT+PFS+UP; prio: 24,24; interface:
eth1;
000 "gl-to-denv":   newest ISAKMP SA: #0; newest IPsec SA: #0;
000
000 #1: "gl-to-denv" STATE_MAIN_I1 (sent MI1, expecting MR1);
EVENT_RETRANSMIT in 17s
000 #1: pending Phase 2 for "gl-to-denv" replacing #0
000
-----------------------

ipsec verify
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path                                         [OK]
Linux FreeS/WAN U2.06/K(KLIPS support not presently loaded)
Checking for IPsec kernel support: found 2.6 native                     [OK]
Checking that pluto is running                                          [OK]
Two or more interfaces found, checking IP forwarding                    [OK]
Checking NAT and MASQUERADEing

Opportunistic Encryption DNS checks:
Looking for TXT in forward map: mailgate.bc.demon.co.uk
[MISSING]
Does the machine have at least one non-private address?                 [OK]
Looking for TXT in reverse map: 1.200.9.192.in-addr.arpa.
[MISSING]
Looking for TXT in reverse map: 70.240.40.212.in-addr.arpa.
[MISSING]

------------------------

My ipsec.conf file is.....

config setup

conn block
        auto=ignore

conn private
        auto=ignore

conn private-or-clear
        auto=ignore

conn clear-or-private
        auto=ignore

conn clear
        auto=ignore

conn packetdefault
        auto=ignore

conn gl-to-denv
        type=tunnel
        left=212.40.240.70
        leftsubnet=192.168.2.0/24
        leftnexthop=%defaultroute
        #[email protected]
        right=64.207.87.85
        rightsubnet=192.168.1.0/24
        rightnexthop=%defaultroute
        #[email protected]
        keyexchange=ike
        auto=start
        authby=secret

-----------------------------

Any suggestions as to why the tunnel isn't starting are much appreciated.

Thanks
Martin.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.