Re: FreeS/WAN - isakmpd

[Andrew Rucker Jones <arjones@simultan.dyndns.org>]

Let me suggest once again that You delete the conn %default section, or 
at least put it at the end of the file. I would also try explicitly 
setting plutostart="hate-test"

		-&


goony wrote:
>>Take a look at these two lines from the FreeS/WAN output:
>>
>>
>>>Dec  6 16:29:34 test ipsec__plutorun: 021 no connection named "hate-test"
>>>Dec  6 16:29:34 test kernel: klips_debug:pfkey_safe_build:success.
>>>Dec  6 16:29:34 test ipsec__plutorun: ...could not start conn "hate-test"
>>
>>Looks like a config error on Linux. Make sure You have a "conn 
>>hate-test" section.
> 
> 
> this is my ipsec.conf.... :(
> 
> config setup
>         interfaces="ipsec0=eth0"
>         klipsdebug=all
>         plutodebug=all
>         plutoload=%search
>         plutostart=%search
>         plutowait=no
> conn %default
>         keyingtries=0
>         spi=0x200
> 
> 
> conn hate-test       <---------
>         auto=start
>         type=tunnel
>         left=192.168.11.192
>         right=192.168.11.127
>         keyexchange=ike
>         ikelifetime=1h
>         keyingtries=5
>         keylife=5m
>         rekeymargin=4m
>         rekeyfuzz=25%
>         pfs=yes
> 
> 
> 
> 


-- 
GPG key / Schlüssel -- http://simultan.dyndns.org/~arjones/gpgkey.txt
Encrypt everything. / Alles verschlüsseln.