|
Dera all:
i am a newbie in IPv6+IPSec.
Now i got an error when implementing usagi-tools.
Please help me to solve this problem. Thanks.
My environment(test-bed) lists below:
i use 2 pcs and 1 cisco router.
O/S:RedHat 9 + Kernel 2.6.0-test11
usagi-tools:0.2.2
Before running setkey+racoon , i can ping6
form one to another with ipv6 address.
After running setkey+racoon , ping6 responses a "Network is
unreachable" message.
The error lists below:
[root@mail1 ipsec-tools-0.2.2]# racoon -F -6 -f
/etc/racoon.conf Foreground mode. 2003-12-26 14:06:24: INFO: main.c:174:main(): @(#)racoon 20001216 20001216 sakane@xxxxxxxx 2003-12-26 14:06:24: INFO: main.c:175:main(): @(#)This product linked OpenSSL 0.9.7a Feb 19 2003 (http://www.openssl.org/) 2003-12-26 14:06:24: INFO: isakmp.c:1362:isakmp_open(): 10.130.20.81[500] used as isakmp port (fd=6) 2003-12-26 14:06:24: INFO: isakmp.c:1362:isakmp_open(): 127.0.0.1[500] used as isakmp port (fd=7) 2003-12-26 14:06:30: INFO: isakmp.c:1688:isakmp_post_acquire(): IPsec-SA request for 3ffe:3600::1:3a queued due to no phase1 found. 2003-12-26 14:06:30: ERROR: sockmisc.c:733:setsockopt_bypass(): setsockopt (Invalid argument) 2003-12-26 14:06:30: ERROR: sockmisc.c:274:getlocaladdr(): connect (Network is unreachable) 2003-12-26 14:06:30: ERROR: pfkey.c:1625:pk_recvacquire(): failed to begin ipsec sa negotication. |