[Ipsec-tools-devel] Isakmpd Configuration Problem for Linux Kernel 2.6: UDP create error

SourceForge Headquarters 225 Broadway Suite 1600 San Diego, CA 92101 +1 (858) 454-5900

<BODY>When I was running ipsec configuration using isakmpd under ipv6 protocol, the following messages appeared in the console:
154920.523250 Default udp_create: 2001:3:4:5::2:500 must exist as a listener too 154920.523266 Default exchange_establish: transport "udp" for peer "hostB" could not be created 
At first I suspected that udp port 500 was occupied, so I ran command netstat -ua to check:
&nbsp;
Proto Recv-Q Send-Q Local Address&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Foreign Address&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; State udp&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0 *:32768&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; *:* 
udp&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0 *:796&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; *:* udp&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0 *:5353&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; *:* 
udp&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0 *:5353&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; *:* udp&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0 *:sunrpc&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; *:* 
udp&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 0 *:ipp&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; *:* &nbsp;&nbsp;&nbsp; Seems that port 500 was vacant, and my configuration files are listed below:
isakmpd.conf
[General] Retransmits = 5 Exchange-max-time = 120 Listen-on=2001:3:4:5::2
[Phase 1] 2001:3:4:5::1 = hostB
[Phase 2] Connections = HostC-HostB
[hostB] Phase = 1 Local-address = 2001:3:4:5::2 Address = 2001:3:4:5::1 Configuration = Default-main-mode Authentication = thisispasswd
[HostC-HostB] Phase = 2 ISAKMP-peer = hostB Configuration = Default-quick-mode Local-ID = Net-C Remote-ID = Net-B
[Net-C] ID-type = IPV6_ADDR Address = 2001:3:4:5::2
[Net-B] ID-type = IPV6_ADDR Address = 2001:3:4:5::2
[Default-main-mode] DOI = IPSEC EXCHANGE_TYPE = ID_PROT Transforms = 3DES-MD5
[Default-quick-mode] DOI = IPSEC EXCHANGE_TYPE = QUICK_MODE Suites = QM-ESP-3DES-MD5-PFS-SUITE 
isakmpd.policy
Athorizer: "POLICY"thorizer: "POLICY" Licensees: "passphrase:thisispasswd" Conditions:app_domain == "IPsec policy" &amp;&amp; &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; (esp_present =="yes" &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; ||ah_present=="yes")-&gt;"true"; 
&nbsp;&nbsp;&nbsp;&nbsp; I don't know what was wrong with my configuration, can anyone tell me the proper cause of this problem? Thanks a lot.
Best Regards, Shen Yan Ran Best Regards, Shen Yan Ran Best Regards, Shen Yan Ran </BODY>