OpenForum RSS: racoon with openswan

racoon with openswan (McLeod095)

Tue, 15 Nov 2011 09:11:04 GMT

��

�� racoon � �� , �� AH_PROTO=none � �� /etc/sysconfig/network-scripts/ifcfg-ipsec
�� , �� centos.
�� racoon � openswan �� . �� , � �� , �� , �� 6 ��

racoon with openswan (McLeod095)

Mon, 14 Nov 2011 08:22:08 GMT

> �� racoon
> setkey -D
> No SAD entries.
> ��

�� racoon
setkey -D
192.168.43.4 192.168.43.8
esp mode=transport spi=0(0x00000000) reqid=0(0x00000000)
seq=0x00000000 replay=0 flags=0x00000000 state=larval
created: Nov 14 12:22:39 2011 current: Nov 14 12:22:57 2011
diff: 18(s) hard: 30(s) soft: 0(s)
last: hard: 0(s) soft: 0(s)
current: 0(bytes) hard: 0(bytes) soft: 0(bytes)
allocated: 0 hard: 0 soft: 0
sadb_seq=2 pid=31181 refcnt=0
192.168.43.8 192.168.43.4
ah mode=transport spi=184246672(0x0afb6190) reqid=0(0x00000000)
seq=0x00000000 replay=0 flags=0x00000000 state=larval
created: Nov 14 12:22:46 2011 current: Nov 14 12:22:57 2011
diff: 11(s) hard: 30(s) soft: 0(s)
last: hard: 0(s) soft: 0(s)
current: 0(bytes) hard: 0(bytes) soft: 0(bytes)

racoon with openswan (McLeod095)

Mon, 14 Nov 2011 08:10:19 GMT

�� racoon
setkey -D
No SAD entries.

��

racoon with openswan (McLeod095)

Mon, 14 Nov 2011 08:07:44 GMT

>[�� ]
> found �� ipsec - ��
> #!/usr/sbin/setkey -f
> #
> # Flush SAD and SPD
> flush;
> spdflush;
> # Create policies for racoon
> spdadd srcnet dstnet any -P out ipsec
> esp/tunnel/extip-extip/require;
> � ��

�� racoon

setkey -DP
192.168.43.8[any] 192.168.43.4[any] any
in prio def ipsec
esp/transport//require
ah/transport//require
created: Nov 10 15:13:18 2011 lastused: Nov 10 16:08:27 2011
lifetime: 0(s) validtime: 0(s)
spid=1072 seq=10 pid=31067
refcnt=1
192.168.43.4[any] 192.168.43.8[any] any
out prio def ipsec
esp/transport//require
ah/transport//require
created: Nov 10 15:13:18 2011 lastused: Nov 10 15:57:23 2011
lifetime: 0(s) validtime: 0(s)
spid=1065 seq=9 pid=31067
refcnt=1
192.168.43.8[any] 192.168.43.4[any] any
fwd prio def ipsec
esp/transport//require
ah/transport//require
created: Nov 10 15:13:18 2011 lastused:
lifetime: 0(s) validtime: 0

racoon with openswan (zakharru)

Fri, 11 Nov 2011 12:32:13 GMT

racoon with openswan (zakharru)

Fri, 11 Nov 2011 12:31:13 GMT

>[�� ]
> Nov 10 16:18:21 z08 pluto[13994]: "test" #1: ignoring informational payload, type NO_PROPOSAL_CHOSEN
> msgid=00000000
> Nov 10 16:18:21 z08 pluto[13994]: "test" #1: received and ignored informational message
> Nov 10 16:18:28 z08 pluto[13994]: "test" #1: ignoring informational payload, type NO_PROPOSAL_CHOSEN
> msgid=00000000
> Nov 10 16:18:28 z08 pluto[13994]: "test" #1: received and ignored informational message
> Nov 10 16:18:31 z08 pluto[13994]: "test" #1: ignoring informational payload, type NO_PROPOSAL_CHOSEN
> msgid=00000000
> Nov 10 16:18:31 z08 pluto[13994]: "test" #1: received and ignored informational message
> �� !!!

�� - > 2011-11-10 16:08:32: ERROR: no suitable policy found �� ipsec - ��
#!/usr/sbin/setkey -f
#
# Flush SAD and SPD
flush;
spdflush;

# Create policies for racoon
spdadd srcnet dstnet any -P out ipsec
esp/tunnel/extip-extip/require;

� ��