Problems initialising connection
"Martin Ferguson" <[email protected]>
| Newsgroups | gmane.network.freeswan.user |
|---|---|
| Message-ID | <002d01c47ef5$265a0ea0$4bc809c0@SHETLAND> |
Hi,
I am trying to tunnel a RedhatES box to a netgear fvs318.
When I start ipsec on the Redhat box, I get the following....
------------------
Aug 10 17:06:19 mailgate ipsec_setup: Starting FreeS/WAN IPsec 2.06...
Aug 10 17:06:19 mailgate ipsec_setup: modprobe: Can't locate module
xfrm_user
Aug 10 17:06:19 mailgate ipsec_setup: KLIPS ipsec0 on eth1
212.40.240.70/255.255.255.252 broadcast 212.20.240.71
Aug 10 17:06:19 mailgate ipsec_setup: ...FreeS/WAN IPsec started
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module ripemd160
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module cast128
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module lzs
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module lzjh
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module ripemd160
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module cast128
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module lzs
Aug 10 17:06:19 mailgate modprobe: modprobe: Can't locate module lzjh
Aug 10 17:06:19 mailgate ipsec__plutorun: 104 "gl-to-denv" #1:
STATE_MAIN_I1: initiate
Aug 10 17:06:19 mailgate ipsec__plutorun: ...could not start conn
"gl-to-denv"
------------------
ipsec whack --status
produces
000 interface lo/lo 127.0.0.1
000 interface eth0/eth0 192.168.2.1
000 interface eth1/eth1 212.40.240.70
000 %myid = (none)
000 debug none
000
000 "gl-to-denv":
192.168.2.0/24===212.40.240.70---212.40.240.69...212.40.240.69---64.207.87.8
5===192.168.1.0/24; prospective erouted; eroute owner: #0
000 "gl-to-denv": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s;
rekey_fuzz: 100%; keyingtries: 0
000 "gl-to-denv": policy: PSK+ENCRYPT+PFS+UP; prio: 24,24; interface:
eth1;
000 "gl-to-denv": newest ISAKMP SA: #0; newest IPsec SA: #0;
000
000 #1: "gl-to-denv" STATE_MAIN_I1 (sent MI1, expecting MR1);
EVENT_RETRANSMIT in 17s
000 #1: pending Phase 2 for "gl-to-denv" replacing #0
000
-----------------------
ipsec verify
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path [OK]
Linux FreeS/WAN U2.06/K(KLIPS support not presently loaded)
Checking for IPsec kernel support: found 2.6 native [OK]
Checking that pluto is running [OK]
Two or more interfaces found, checking IP forwarding [OK]
Checking NAT and MASQUERADEing
Opportunistic Encryption DNS checks:
Looking for TXT in forward map: mailgate.bc.demon.co.uk
[MISSING]
Does the machine have at least one non-private address? [OK]
Looking for TXT in reverse map: 1.200.9.192.in-addr.arpa.
[MISSING]
Looking for TXT in reverse map: 70.240.40.212.in-addr.arpa.
[MISSING]
------------------------
My ipsec.conf file is.....
config setup
conn block
auto=ignore
conn private
auto=ignore
conn private-or-clear
auto=ignore
conn clear-or-private
auto=ignore
conn clear
auto=ignore
conn packetdefault
auto=ignore
conn gl-to-denv
type=tunnel
left=212.40.240.70
leftsubnet=192.168.2.0/24
leftnexthop=%defaultroute
#[email protected]
right=64.207.87.85
rightsubnet=192.168.1.0/24
rightnexthop=%defaultroute
#[email protected]
keyexchange=ike
auto=start
authby=secret
-----------------------------
Any suggestions as to why the tunnel isn't starting are much appreciated.
Thanks
Martin.