<html><body><div style="color:#000; background-color:#fff; font-family:times new roman, new york, times, serif;font-size:12pt"><div><div><div>Hello, Andreas, hello all</div><div><br></div><div>I am trying to bring up a IPv6 tunnel between my SeGW and a strongSwan client running on Linux. The tunnel was able to be setup however strongSwan failed to install the route for virtual endpoint IP (assigned by the SeGW). Thus I was not able to pass data over the tunnel. When I tried to ping6 over the tunnel, ping6 returns "ping: sendmsg: Network is unreachable". I wonder if you have run into this issue before or know how to fix this.</div><div><br></div><div>Thanks very much</div><div>Nan</div><div><br></div><div>The strongSwan trace and my connection configuration is as following: </div><div><br></div><div>strongSwan traces:</div><div>.....................</div><div>sending packet: from 1080::ac10:202[4500] to
1080::ac10:102[4500]<br></div><div>received packet: from 1080::ac10:102[4500] to 1080::ac10:202[4500]</div><div>parsed IKE_AUTH response 5 [ AUTH CP(ADDR6) SA TSi TSr ]</div><div>authentication of '1080::ac10:102' with EAP successful</div><div>IKE_SA ipv6_sim[4] established between 1080::ac10:202[1080::ac10:202]...1080::ac10:102[1080::ac10:102]</div><div>scheduling rekeying in 9998s</div><div>maximum IKE_SA lifetime 10538s</div><div>installing new virtual IP 1080::abcd:0:2</div><div>received netlink error: Invalid argument (22)</div><div>unable to install source route for 1080::abcd:0:2</div><div>received netlink error: Invalid argument (22)</div><div>unable to install source route for 1080::abcd:0:2</div><div><br></div></div><div>conn ipv6_sim</div><div> left=1080::ac10:202</div><div> leftsourceip=%config</div><div> leftfirewall=no</div><div> leftauth=eap</div><div>
eap=sim</div><div> eap_identity=1234567</div><div> leftsubnet=1080::abcd:0:0/112</div><div> right=1080::ac10:102</div><div> rightsubnet=1172::ac10:191/112</div><div> rightauth=psk</div><div> auto=add</div><div> esp=3des-aes-sha1-md5-modp1024</div><div> ike=3des-aes-sha1-md5-modp1024</div><div style="font-family: 'times new roman', 'new york', times, serif; font-size: 12pt; "><br></div></div> </div></body></html>