From: ZAKIR A. <zak...@ya...> - 2009-06-25 09:37:58
|
Hi, I am Zakir Ahmed, a Lead Engineer in one of the company. I am setting up ipsec on my target machine. I am succesfully able to setup ipsec transport mode for ipv4 addresses. When I come to setup manual keying for ipv6 addresses, the setkey gives parse failed error. I use a simple file with one line add 2001:db8:1:0:2e0:cff:fe11:fd 2001:db8:1:0:20b:cdff:fefb:8a4e ah 24500 -A hmac-md5 "1234567890123456" I run the command setkey -f file parse failed, line 1. The same file works with ipv4 addresses. I have cross checked the problem with ipsec-tools versions 0.6.4 AND 0.7.2 latest as well I have cross checked over kernel-21 and kernel-29 but the same behavior. I have configured IPV6 and all options under that except experimental things I use openssl-0.9.8k My platform is powerpc. I am just bugged off with this stuff. Any help would be appreciated. It would be also helpful, if any online help could be provided. With Regards, Zakir Ahmed "And fear Almighty, and know that you are to meet him in the hereafter" > > Cricket on your mind? Visit the > ultimate cricket website. Enter http://cricket.yahoo.com > ICC World Twenty20 England '09 exclusively on YAHOO! CRICKET http://cricket.yahoo.com |
From: Brian H. <bri...@hp...> - 2009-06-25 14:12:19
|
ZAKIR AHMED wrote: > When I come to setup manual keying for ipv6 addresses, the > setkey gives parse failed error. I use a simple file > with one line > > add 2001:db8:1:0:2e0:cff:fe11:fd > 2001:db8:1:0:20b:cdff:fefb:8a4e ah 24500 -A hmac-md5 > "1234567890123456" > > I run the command > setkey -f file > parse failed, line 1. You seem to be missing a semicolon (;) at the end of the line. -Brian |
From: Sourav P. <sou...@gm...> - 2015-10-20 12:20:29
|
ZAKIR AHMED <zaks_974@...> writes: > > > Hi, > > I am Zakir Ahmed, a Lead Engineer in one of the company. I > am setting up ipsec on my target machine. I am succesfully > able to setup ipsec transport mode for ipv4 addresses. > > When I come to setup manual keying for ipv6 addresses, the > setkey gives parse failed error. I use a simple file > with one line > > add 2001:db8:1:0:2e0:cff:fe11:fd > 2001:db8:1:0:20b:cdff:fefb:8a4e ah 24500 -A hmac-md5 > "1234567890123456" > > I run the command > setkey -f file > parse failed, line 1. > > The same file works with ipv4 addresses. > > I have cross checked the problem with ipsec-tools versions > 0.6.4 AND 0.7.2 latest as well > > I have cross checked over kernel-21 and kernel-29 but the > same behavior. I have configured IPV6 and all options under > that except experimental things > > I use openssl-0.9.8k > My platform is powerpc. I was facing the same problem .verified in powerpc (using kernel -2.6.10 and 2.6.34 ,ipsec-tools0.7.3 and 0.7.2). I found that by default ipv6 option is not enabled in the package as documented. ./configure output whether to enable ipv6... no after using ./configure --enable-ipv6=yes i was able to solve this problem. and ipv6 ah,esp support must be enabled in th kernel. to build shared library (libipsec.so) use --enable-shared=yes Hope it helps. Do give a reply !! |