Re: [Users] Multiple RWs with X.509

From: Andreas Steffen <andreas.steffen(at)strongsec.net>
Date: Tue Feb 18 2003 - 11:32:22 EST

martin f krafft wrote:
> also sprach Andreas Steffen <andreas.steffen@strongsec.net> [2003.02.18.1702 +0100]:
>

>>means that ipsec auto --status does not show a connection with that
>>ID. This may be due to an error that occured when the connection
>>definition "fishbowl-albatross" was loaded on the gateway during Pluto
>>startup. So please check if "fishbowl-albatross" shows up in
>>ipsec auto -status and matches character-per-character with the Peer
>>ID.

>
>
> You are perfectly right (as usual), but I wonder:
>
> ipsec auto --add fishbowl-albatross
>
> on the gateway added the connection without problems. It then showed
> up in the status output. I have auto=add in the defaults section, and
> all the other connections got added automatically, just not this one.
> Only one of the four defined connections on the gateway -- the first
> one -- overrides auto=add with auto=start, the other connections don't
> specify the auto= parameter.
>

Really no error messages in the log when the four connections are loaded during Pluto startup??

In stone-age versions of FreeS/WAN the auto parameter did not duplicate when put into the conn %default section. But I assume that you are driving a newer FreeS/WAN model :)

---

Andreas Steffen                   e-mail: andreas.steffen@strongsec.com
strongSec GmbH                    home:   
http://www.strongsec.com
Alter Zürichweg 20                phone:  +41 1 730 80 64

CH-8952 Schlieren (Switzerland) fax: +41 1 730 80 65

==========================================[strong internet security]===


_______________________________________________

Users mailing list
Users@lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users Received on Tue Feb 18 12:18:57 2003