[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
(usagi-users 01991) Re: problem with pluto usagi version when using IPv6 addresses
- To: usagi-users@xxxxxxxxxxxxxx
- Subject: (usagi-users 01991) Re: problem with pluto usagi version when using IPv6 addresses
- From: Kazunori Miyazawa <Kazunori.Miyazawa@xxxxxxxxxxxxxxx>
- Date: Wed, 27 Nov 2002 10:43:26 +0900
- In-reply-to: <3DE398EE.C425EB2D@loria.fr>
- References: <3DE393A7.B1CD5E9E@loria.fr> <200211262327.FMLAAB4262.usagi-users@linux-ipv6.org> <3DE398EE.C425EB2D@loria.fr>
- Reply-to: usagi-users@xxxxxxxxxxxxxx
Hello,
Thank you for using USAGI IPsec.
Please let me confirm. You did "ipsec auto --ready" before "ipsec auto --up test".
You only make pluto run. Pluto is just running and waiting configurations.
"ipsec auto --ready" make pluto ready to request/accept key exchanges.
On Tue, 26 Nov 2002 16:53:18 +0100
Abdelkader Lahmadi <Abdelkader.Lahmadi@xxxxxxxx> wrote:
> hello,
> i'm installing the USAGI kit on two machines and i'm trying using IPSEC between them.
> when trying the automatic keying, when bringing the connection up using
> ipsec auto --up test (tes is the name o my connection)
> i have this error message
> 022 "test": we have no local interface for either end of this connection
>
> my ipsec.conf is like this:
> # /etc/ipsec.conf - FreeS/WAN IPsec configuration file
>
> # More elaborate and more varied sample configurations can be found
> # in FreeS/WAN's doc/examples file, and in the HTML documentation.
>
>
>
> # basic configuration
> config setup
> # THIS SETTING MUST BE CORRECT or almost nothing will work;
> # %defaultroute is okay for most simple cases.
> interfaces="ipsec0=eth0"
> # Debug-logging controls: "none" for (almost) none, "all" for lots.
> klipsdebug=none
> plutodebug=none
> # Use auto= parameters in conn descriptions to control startup actions.
> plutoload=%search
> plutostart=%search
> # Close down old connection when new one using same ID shows up.
> uniqueids=yes
>
>
>
> # defaults for subsequent connection descriptions
> conn %default
> # How persistent to be in (re)keying negotiations (0 means very).
> keyingtries=0
> # RSA authentication with keys from DNS.
> # authby=rsasig
> # leftrsasigkey=%dns
> # rightrsasigkey=%dns
>
> conn test
> af=inet6
> type=transport
> authby=secret
> left=2001:688:1fb8:32:204:76ff:fef5:c8bc
> right=2001:0688:1fb8:0032:0204:76ff:fef5:c5dd
> esp=3des-md5-96
> auth=ah
> ah=hmac-md5-96
>
>
>
>
>
>
--Kazunori Miyazawa(YOKOGAWA Electric Corporation)