<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=utf-8">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>Ipsec tunnel creation fails with received netlink error: No such file or directory (2) </TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><SPAN LANG="en-us"><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">Hi All,</FONT><FONT FACE="Times New Roman"> </FONT></SPAN>
<BR><SPAN LANG="en-us"><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">We are using the 2.6.18-194 RHEL kernel on a diskless client. We have compiled this kernel for IPSec support. Now the issue is even after enabling all the required kernel modules for<B> Ipsec</B> we are still not able to create a tunnel as the tunnel creation fails with the error as blocked in red at the bottom.</FONT></SPAN></P>
<P><SPAN LANG="en-us"><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:37 hp3 charon: 03[CFG] received stroke: add connection 'host_2003'</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:37 hp3 charon: 03[LIB] loaded certificate file '/etc/ipsec.d/certs/FAP-signed-by-ca-2002.pem'</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:37 hp3 charon: 03[CFG] added configuration 'host_2003': 110.11.101.1[O=NSN, CN=FAP-2002]...110.10.101.1[O=NSN, CN=FAP-2000]</FONT></SPAN></P>
<P><SPAN LANG="en-us"><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:37 hp3 charon: 03[CFG] adding virtual IP address pool 'host_2003': 10.10.101.1/32</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 10[NET] received packet: from 110.10.101.1[500] to 110.11.101.1[500]</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 10[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 10[IKE] 110.10.101.1 is initiating an IKE_SA</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 10[IKE] DH group MODP_2048_BIT inacceptable, requesting MODP_1024_BIT</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 10[ENC] generating IKE_SA_INIT response 0 [ N(INVAL_KE) ]</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 10[NET] sending packet: from 110.11.101.1[500] to 110.10.101.1[500]</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 11[NET] received packet: from 110.10.101.1[500] to 110.11.101.1[500]</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 11[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 11[IKE] 110.10.101.1 is initiating an IKE_SA</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 11[IKE] sending cert request for "O=NSN, CN=CA"</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 11[ENC] generating IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) CERTREQ ]</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 11[NET] sending packet: from 110.11.101.1[500] to 110.10.101.1[500]</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 12[NET] received packet: from 110.10.101.1[500] to 110.11.101.1[500]</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 12[ENC] parsed IKE_AUTH request 1 [ IDi CERT CERTREQ IDr AUTH CP SA TSi TSr ]</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 12[IKE] received cert request for "O=NSN, CN=CA"</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 12[IKE] received end entity cert "O=NSN, CN=FAP-2000"</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 12[CFG] using certificate "O=NSN, CN=FAP-2000"</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 12[CFG] using trusted ca certificate "O=NSN, CN=CA"</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 12[CFG] checking certificate status of "O=NSN, CN=FAP-2000"</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 12[CFG] certificate status is not available</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 12[IKE] authentication of 'O=NSN, CN=FAP-2000' with RSA signature successful</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:40 hp3 charon: 12[CFG] found matching peer config "host_2003": O=NSN, CN=FAP-2002...O=NSN, CN=FAP-2000 with prio 40.12</FONT></SPAN></P>
<P><SPAN LANG="en-us"><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:41 hp3 charon: 12[IKE] authentication of 'O=NSN, CN=FAP-2002' (myself) with RSA signature successful</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:41 hp3 charon: 12[IKE] scheduling reauthentication in 86055s</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:41 hp3 charon: 12[IKE] maximum IKE_SA lifetime 86235s</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:41 hp3 charon: 12[IKE] IKE_SA host_2003[2] established between 110.11.101.1[O=NSN, CN=FAP-2002]...110.10.101.1[O=NSN, CN=FAP-2000]</FONT></SPAN></P>
<P><SPAN LANG="en-us"><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:41 hp3 charon: 12[IKE] sending end entity cert "O=NSN, CN=FAP-2002"</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:41 hp3 charon: 12[IKE] peer requested virtual IP 10.10.101.1</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:41 hp3 charon: 12[CFG] assigning new lease to O=NSN, CN=FAP-2000</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">May 19 09:25:41 hp3 charon: 12[IKE] assigning virtual IP 10.10.101.1 to peer</FONT><FONT FACE="Times New Roman"><BR>
</FONT><B></B><B><FONT COLOR="#FF0000" SIZE=2 FACE="Arial">May 19 09:25:41 hp3 charon: 12[KNL] received netlink error: No such file or directory (2)</FONT></B><FONT FACE="Times New Roman"><BR>
</FONT><B></B><B><FONT COLOR="#FF0000" SIZE=2 FACE="Arial">May 19 09:25:41 hp3 charon: 12[KNL] unable to add SAD entry with SPI c7f8ee23</FONT></B><FONT FACE="Times New Roman"><BR>
</FONT><B></B><B><FONT COLOR="#FF0000" SIZE=2 FACE="Arial">May 19 09:25:41 hp3 charon: 12[KNL] received netlink error: No such file or directory (2)</FONT></B><FONT FACE="Times New Roman"><BR>
</FONT><B></B><B><FONT COLOR="#FF0000" SIZE=2 FACE="Arial">May 19 09:25:41 hp3 charon: 12[KNL] unable to add SAD entry with SPI cdcb9c8f</FONT></B><FONT FACE="Times New Roman"><BR>
</FONT><B></B><B><FONT COLOR="#FF0000" SIZE=2 FACE="Arial">May 19 09:25:41 hp3 charon: 12[IKE] unable to install IPsec SA (SAD) in kernel</FONT></B><FONT FACE="Times New Roman"> </FONT></SPAN>
<BR><SPAN LANG="en-us"><B><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">The last few lines is the error received everytime we try to create a Ipsec tunnel.</FONT></B> </SPAN>
<BR><SPAN LANG="en-us"><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">Can anybody please help me in solving this issue? </FONT></SPAN>
<BR><SPAN LANG="en-us"><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">Thanks in advance</FONT></SPAN>
<BR><SPAN LANG="en-us"><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">Regards,</FONT><FONT FACE="Times New Roman"><BR>
</FONT><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">Pradeep.A</FONT><FONT FACE="Times New Roman"> </FONT></SPAN>
</P>
</BODY>
</HTML>