[Users] Problem usin Ipsec

From: Munro Biswal <munro.biswal(at)smartbridges.com>
Date: Wed Mar 31 2004 - 08:40:50 EST

Hi, all,
Iam trying to use ipsec on a host-to host config. iam trying out this just to simplify things before procedding on to advanced configs.
My setup looks like

Two embedded linux boxes connected back to back

  Host1(192.168.7.3- ipsec0 )<----------------------->Host2(192.168.7.8- 

ipsec0 )
my /etc/ipsec.conf and /etc/ipsec.secrets are the same on both hosts.

But when i start ipsec and try to ping across , i get the following error messages attached herewith.

Thanks in advance.

---

klips_debug:ipsec_tunnel_hard_header: skb->dev=ipsec0 dev=ipsec0. klips_debug:ipsec_tunnel_hard_header: Revectored 0x00000000->0xc3cb5144 len=84 type=2048 dev=ipsec0->ixp0 dev_addr=00:02:b3:01:01:01 ip=c0a80703->c0a80708

klips_debug:ipsec_tunnel_start_xmit: >>> skb->len=98 hard_header_len:14 
00:02:b3:01:01:01:00:02:b3:01:01:01:08:00
klips_debug:   IP: ihl:20 ver:4 tos:0 tlen:84 id:0 DF frag_off:0 ttl:64 

proto:1 (ICMP) chk:43853 saddr:192.168.7.3 daddr:192.168.7.8 type:code=8:0

klips_debug:ipsec_findroute: 192.168.7.3->192.168.7.8
klips_debug:rj_match: * See if we match exactly as a host destination
klips_debug:rj_match: ** try to match a leaf, t=0xc0360d48
klips_debug:rj_match: *** start searching up the tree, t=0xc0360d48
klips_debug:rj_match: **** t=0xc0360d60
klips_debug:rj_match: ***** not found.
klips_debug:ipsec_tunnel_start_xmit: checking for local udp/500 IKE 

packet saddr=c0a80703, er=00000000, daddr=c0a80708, er_dst=0, proto=1 sport=0 dport=0
klips_debug:ipsec_tunnel_start_xmit: Original head,tailroom: 2,28 klips_debug:ipsec_tunnel_start_xmit: shunt SA of DROP or no eroute: dropping.

---

FreeS/WAN Users mailing list
users@lists.freeswan.org
https://mj2.freeswan.org/cgi-bin/mj_wwwusr Received on Wed Mar 31 00:47:07 2004