[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

(usagi-users 01991) Re: problem with pluto usagi version when using IPv6 addresses



Hello, 

Thank you for using USAGI IPsec.
Please let me confirm. You did "ipsec auto --ready" before "ipsec auto --up test".

You only make pluto run. Pluto is just running and waiting configurations.
"ipsec auto --ready" make pluto ready to request/accept key exchanges.

On Tue, 26 Nov 2002 16:53:18 +0100
Abdelkader Lahmadi <Abdelkader.Lahmadi@xxxxxxxx> wrote:

> hello,
> i'm installing the USAGI kit on two machines and i'm trying using IPSEC between them.
> when trying the automatic keying, when bringing the connection up using
> ipsec auto --up test (tes is the name o my connection)
> i have this error message
> 022 "test": we have no local interface for either end of this connection
> 
> my ipsec.conf is like this:
> # /etc/ipsec.conf - FreeS/WAN IPsec configuration file
> 
> # More elaborate and more varied sample configurations can be found
> # in FreeS/WAN's doc/examples file, and in the HTML documentation.
> 
> 
> 
> # basic configuration
> config setup
>         # THIS SETTING MUST BE CORRECT or almost nothing will work;
>         # %defaultroute is okay for most simple cases.
>         interfaces="ipsec0=eth0"
>         # Debug-logging controls:  "none" for (almost) none, "all" for lots.
>         klipsdebug=none
>         plutodebug=none
>         # Use auto= parameters in conn descriptions to control startup actions.
>         plutoload=%search
>         plutostart=%search
>         # Close down old connection when new one using same ID shows up.
>         uniqueids=yes
> 
> 
> 
> # defaults for subsequent connection descriptions
> conn %default
>         # How persistent to be in (re)keying negotiations (0 means very).
>         keyingtries=0
>         # RSA authentication with keys from DNS.
> #       authby=rsasig
> #       leftrsasigkey=%dns
> #       rightrsasigkey=%dns
> 
> conn test
>         af=inet6
>         type=transport
>         authby=secret
>         left=2001:688:1fb8:32:204:76ff:fef5:c8bc
>         right=2001:0688:1fb8:0032:0204:76ff:fef5:c5dd
>         esp=3des-md5-96
>         auth=ah
>         ah=hmac-md5-96
> 
> 
> 
> 
> 
> 


--Kazunori Miyazawa(YOKOGAWA Electric Corporation)