(usagi-users 03120) Re: IPsec starting error

[Kazunori Miyazawa <kazunori@xxxxxxxxxxxx>]

Hello,

I don't know which distribution you use...

If you use tools under usagi/{pfkey, pluto} ? You can not use it on
linux-2.6. We use setkey and raoon on linux-2.6 which we can get from
ipsec-tools in sourceforge.

"ipsec" command is derived from freeswan. It would be supported by
openswan continuously. If you use it, please ask openswan guys.

Best regards,

kuji@xxxxxxxxxxxxxxxxx wrote:
> Hi!
> 
> Would you help someone? 
> The following messages are outputted at the time of starting of IPsec,
> and a session cannot be established. 
> 
> Please let me know the cause of this message.
> Environment is Linux kernel 2.6.
> 
> erver2 sbin]# ./ipsec auto --up test1
> 112 "test1" #152: STATE_QUICK_I1: initiate
> 003 "test1" #152: ERROR: PF_KEY SADB_X_ADDFLOW response for flow esp:1699fbb2@2001:380:1f7:1000::221 included errno 22: Invalid argument
> 032 "test1" #152: STATE_QUICK_I1: internal error
> 003 "test1" #152: ERROR: PF_KEY SADB_X_ADDFLOW response for flow esp:1699fbb2@2001:380:1f7:1000::221 included errno 22: Invalid argument
> 032 "test1" #152: STATE_QUICK_I1: internal error
> 010 "test1" #152: STATE_QUICK_I1: retransmission; will wait 20s for response
> 010 "test1" #152: STATE_QUICK_I1: retransmission; will wait 40s for response
> 003 "test1" #152: ERROR: PF_KEY SADB_X_ADDFLOW response for flow esp:1699fbb2@2001:380:1f7:1000::221 included errno 22: Invalid argument
> 032 "test1" #152: STATE_QUICK_I1: internal error
> 031 "test1" #152: max number of retransmissions (2) reached STATE_QUICK_I1
> 000 "test1" #152: starting keying attempt 2 of an unlimited number, but releasing whack
> 
> 
> Naotsugu Kuji
>  kuji@xxxxxxxxxxxxxxxxx
> 
> 

--
Kazunori Miyazawa