Re: [Ipsec-tools-users] problem

[Brian A. S. <lav...@sp...>]

What platform?  What kernel revision?  What configure flags from
config.lgo?

~BAS

On Fri, 2007-05-18 at 18:17 +0800, fupan li wrote:
> Hi，I met  a problem when I used the ipsec_tools 0.7beta3. I used the
> ipcomp  protocol  only  with the tunnel mold ,one gateway is used
> passive mold ,the peer is not. I found the 
> 
> Policy is generated successfully ,but the sa can't generate
> successfully. The info and error as bellows:
> 
> 2007-05-18 12:26:52: INFO: respond new phase 2 negotiation:
> 11.11.11.2[500]<=>11.11.11.1[500]
> 
> 2007-05-18 12:26:52: INFO: Update the generated policy :
> 10.10.10.0/24[0] 12.12.12.0/24[0] proto=any dir=in
> 
> 2007-05-18 12:26:52: ERROR: pfkey UPDATE failed: Invalid argument
> 
> 2007-05-18 12:26:52: ERROR: pfkey ADD failed: Invalid argument
> 
> 2007-05-18 12:26:52: ERROR: such policy does not already exist:
> "10.10.10.0/24[0] 12.12.12.0/24[0] proto=any dir=in"
> 
> 2007-05-18 12:26:52: ERROR: such policy does not already exist:
> "10.10.10.0/24[0] 12.12.12.0/24[0] proto=any dir=fwd"
> 
> 2007-05-18 12:26:52: ERROR: such policy does not already exist:
> "12.12.12.0/24[0] 10.10.10.0/24[0] proto=any dir=out"
> 
> 2007-05-18 12:26:54: INFO: phase2 sa expired 11.11.11.2-11.11.11.1
> 
> 2007-05-18 12:26:55: INFO: phase2 sa deleted 11.11.11.2-11.11.11.1
> 
>  Can you help me.
> 
> 
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> _______________________________________________ Ipsec-tools-users mailing list Ips...@li... https://lists.sourceforge.net/lists/listinfo/ipsec-tools-users