<html><head></head><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, Sans-Serif;font-size:16px"><div id="yui_3_16_0_ym19_1_1476828861073_3071">hi All,</div><div id="yui_3_16_0_ym19_1_1476828861073_3071"><br></div><div id="yui_3_16_0_ym19_1_1476828861073_3071" dir="ltr">We are having this issue with route addition. Eth3 is loop back interface. Any clues why?</div><div id="yui_3_16_0_ym19_1_1476828861073_3071"><br></div><div id="yui_3_16_0_ym19_1_1476828861073_3071">Oct 18 14:26:46 ubuntu-28 charon: 07[CFG] selected proposal: ESP:AES_CBC_128/HMAC_SHA1_96/NO_EXT_SEQ</div><div id="yui_3_16_0_ym19_1_1476828861073_3072">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] getting SPI for reqid {1}</div><div id="yui_3_16_0_ym19_1_1476828861073_3073">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] got SPI cdde868a for reqid {1}</div><div id="yui_3_16_0_ym19_1_1476828861073_3074">Oct 18 14:26:46 ubuntu-28 charon: 07[CFG] selecting traffic selectors for us:</div><div id="yui_3_16_0_ym19_1_1476828861073_3075">Oct 18 14:26:46 ubuntu-28 charon: 07[CFG] config: 0.0.0.0/0, received: 0.0.0.0/0 => match: 0.0.0.0/0</div><div id="yui_3_16_0_ym19_1_1476828861073_3076">Oct 18 14:26:46 ubuntu-28 charon: 07[CFG] selecting traffic selectors for other:</div><div id="yui_3_16_0_ym19_1_1476828861073_3077">Oct 18 14:26:46 ubuntu-28 charon: 07[CFG] config: 100.120.120.1/32, received: 0.0.0.0/0 => match: 100.120.120.1/32</div><div id="yui_3_16_0_ym19_1_1476828861073_3078">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] adding SAD entry with SPI cdde868a and reqid {1} (mark 0/0x00000000)</div><div id="yui_3_16_0_ym19_1_1476828861073_3079">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] using encryption algorithm AES_CBC with key size 128</div><div id="yui_3_16_0_ym19_1_1476828861073_3080">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] using integrity algorithm HMAC_SHA1_96 with key size 160</div><div id="yui_3_16_0_ym19_1_1476828861073_3081">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] using replay window of 32 packets</div><div id="yui_3_16_0_ym19_1_1476828861073_3082">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] adding SAD entry with SPI c832aca7 and reqid {1} (mark 0/0x00000000)</div><div id="yui_3_16_0_ym19_1_1476828861073_3083">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] using encryption algorithm AES_CBC with key size 128</div><div id="yui_3_16_0_ym19_1_1476828861073_3084">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] using integrity algorithm HMAC_SHA1_96 with key size 160</div><div id="yui_3_16_0_ym19_1_1476828861073_3085">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] using replay window of 32 packets</div><div id="yui_3_16_0_ym19_1_1476828861073_3086">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] adding policy 0.0.0.0/0 === 100.120.120.1/32 out (mark 0/0x00000000)</div><div id="yui_3_16_0_ym19_1_1476828861073_3087">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] adding policy 100.120.120.1/32 === 0.0.0.0/0 in (mark 0/0x00000000)</div><div id="yui_3_16_0_ym19_1_1476828861073_3088">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] adding policy 100.120.120.1/32 === 0.0.0.0/0 fwd (mark 0/0x00000000)</div><div id="yui_3_16_0_ym19_1_1476828861073_3089">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] getting a local address in traffic selector 0.0.0.0/0</div><div id="yui_3_16_0_ym19_1_1476828861073_3090">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] using host %any</div><div id="yui_3_16_0_ym19_1_1476828861073_3091">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] using 10.0.10.1 as nexthop to reach 173.38.168.235</div><div id="yui_3_16_0_ym19_1_1476828861073_3092">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] 128.107.252.138 is on interface eth3</div><div id="yui_3_16_0_ym19_1_1476828861073_3093">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] installing route: 100.120.120.1/32 via 10.0.10.1 src %any dev eth3</div><div id="yui_3_16_0_ym19_1_1476828861073_3094">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] getting iface index for eth3</div><div id="yui_3_16_0_ym19_1_1476828861073_3095">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] received netlink error: Network is unreachable (101)</div><div id="yui_3_16_0_ym19_1_1476828861073_3096">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] unable to install source route for %any</div><div id="yui_3_16_0_ym19_1_1476828861073_3097">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] policy 0.0.0.0/0 === 100.120.120.1/32 out (mark 0/0x00000000) already exists, increasing refcount</div><div id="yui_3_16_0_ym19_1_1476828861073_3098">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] updating policy 0.0.0.0/0 === 100.120.120.1/32 out (mark 0/0x00000000)</div><div id="yui_3_16_0_ym19_1_1476828861073_3099">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] policy 100.120.120.1/32 === 0.0.0.0/0 in (mark 0/0x00000000) already exists, increasing refcount</div><div id="yui_3_16_0_ym19_1_1476828861073_3100">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] updating policy 100.120.120.1/32 === 0.0.0.0/0 in (mark 0/0x00000000)</div><div id="yui_3_16_0_ym19_1_1476828861073_3101">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] policy 100.120.120.1/32 === 0.0.0.0/0 fwd (mark 0/0x00000000) already exists, increasing refcount</div><div id="yui_3_16_0_ym19_1_1476828861073_3102">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] updating policy 100.120.120.1/32 === 0.0.0.0/0 fwd (mark 0/0x00000000)</div><div id="yui_3_16_0_ym19_1_1476828861073_3103">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] getting a local address in traffic selector 0.0.0.0/0</div><div id="yui_3_16_0_ym19_1_1476828861073_3104">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] using host %any</div><div id="yui_3_16_0_ym19_1_1476828861073_3105">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] using 10.0.10.1 as nexthop to reach 173.38.168.235</div><div id="yui_3_16_0_ym19_1_1476828861073_3106">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] 128.107.252.138 is on interface eth3</div><div id="yui_3_16_0_ym19_1_1476828861073_3107">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] installing route: 100.120.120.1/32 via 10.0.10.1 src %any dev eth3</div><div id="yui_3_16_0_ym19_1_1476828861073_3108">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] getting iface index for eth3</div><div id="yui_3_16_0_ym19_1_1476828861073_3109">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] received netlink error: Network is unreachable (101)</div><div id="yui_3_16_0_ym19_1_1476828861073_3110">Oct 18 14:26:46 ubuntu-28 charon: 07[KNL] unable to install source route for %any</div><div id="yui_3_16_0_ym19_1_1476828861073_3111">Oct 18 14:26:46 ubuntu-28 charon: 07[IKE] CHILD_SA certs-only{1} established with SPIs cdde868a_i c832aca7_o and TS 0.0.0.0/0 === 100.120.120.1/32 </div><div id="yui_3_16_0_ym19_1_1476828861073_3112">O</div><div id="yui_3_16_0_ym19_1_1476828861073_3113">^C</div><div id="yui_3_16_0_ym19_1_1476828861073_3114">root@ubuntu-28:/etc# show ip address</div><div id="yui_3_16_0_ym19_1_1476828861073_3115">The program 'show' is currently not installed. You can install it by typing:</div><div id="yui_3_16_0_ym19_1_1476828861073_3116">apt-get install nmh</div><div id="yui_3_16_0_ym19_1_1476828861073_3117">root@ubuntu-28:/etc# ip addres show</div><div id="yui_3_16_0_ym19_1_1476828861073_3118">1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default </div><div id="yui_3_16_0_ym19_1_1476828861073_3119"> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00</div><div id="yui_3_16_0_ym19_1_1476828861073_3120"> inet 127.0.0.1/8 scope host lo</div><div id="yui_3_16_0_ym19_1_1476828861073_3121"> valid_lft forever preferred_lft forever</div><div id="yui_3_16_0_ym19_1_1476828861073_3122"> inet6 ::1/128 scope host </div><div id="yui_3_16_0_ym19_1_1476828861073_3123"> valid_lft forever preferred_lft forever</div><div id="yui_3_16_0_ym19_1_1476828861073_3124">2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000</div><div id="yui_3_16_0_ym19_1_1476828861073_3125"> link/ether b8:38:61:7c:24:9e brd ff:ff:ff:ff:ff:ff</div><div id="yui_3_16_0_ym19_1_1476828861073_3126"> inet 10.0.10.28/24 brd 10.0.10.255 scope global eth0</div><div id="yui_3_16_0_ym19_1_1476828861073_3127"> valid_lft forever preferred_lft forever</div><div id="yui_3_16_0_ym19_1_1476828861073_3128"> inet6 2001:420:81:ff99:ba38:61ff:fe7c:249e/64 scope global dynamic </div><div id="yui_3_16_0_ym19_1_1476828861073_3129"> valid_lft 2591962sec preferred_lft 604762sec</div><div id="yui_3_16_0_ym19_1_1476828861073_3130"> inet6 fe80::ba38:61ff:fe7c:249e/64 scope link </div><div id="yui_3_16_0_ym19_1_1476828861073_3131"> valid_lft forever preferred_lft forever</div><div id="yui_3_16_0_ym19_1_1476828861073_3132">3: eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 9000 qdisc mq state UP group default qlen 1000</div><div id="yui_3_16_0_ym19_1_1476828861073_3133"> link/ether b8:38:61:7c:24:9f brd ff:ff:ff:ff:ff:ff</div><div id="yui_3_16_0_ym19_1_1476828861073_3134"> inet 10.0.0.1/24 brd 10.0.0.255 scope global eth1</div><div id="yui_3_16_0_ym19_1_1476828861073_3135"> valid_lft forever preferred_lft forever</div><div id="yui_3_16_0_ym19_1_1476828861073_3136"> inet6 fe80::ba38:61ff:fe7c:249f/64 scope link </div><div id="yui_3_16_0_ym19_1_1476828861073_3137"> valid_lft forever preferred_lft forever</div><div id="yui_3_16_0_ym19_1_1476828861073_3138">4: eth2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000</div><div id="yui_3_16_0_ym19_1_1476828861073_3139"> link/ether b8:38:61:7c:24:a0 brd ff:ff:ff:ff:ff:ff</div><div id="yui_3_16_0_ym19_1_1476828861073_3140"> inet6 fe80::ba38:61ff:fe7c:24a0/64 scope link </div><div id="yui_3_16_0_ym19_1_1476828861073_3141"> valid_lft forever preferred_lft forever</div><div id="yui_3_16_0_ym19_1_1476828861073_3142">5: eth3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP group default qlen 1000</div><div id="yui_3_16_0_ym19_1_1476828861073_3143"> link/ether b8:38:61:7c:24:a1 brd ff:ff:ff:ff:ff:ff</div><div id="yui_3_16_0_ym19_1_1476828861073_3144"> inet 128.107.252.138/32 brd 128.107.252.138 scope global eth3</div><div id="yui_3_16_0_ym19_1_1476828861073_3145"> valid_lft forever preferred_lft forever</div><div id="yui_3_16_0_ym19_1_1476828861073_3146"> inet6 fe80::ba38:61ff:fe7c:24a1/64 scope link </div><div id="yui_3_16_0_ym19_1_1476828861073_3147"> valid_lft forever preferred_lft forever</div><div id="yui_3_16_0_ym19_1_1476828861073_3148">6: eth1.11@eth1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default </div><div id="yui_3_16_0_ym19_1_1476828861073_3149"> link/ether b8:38:61:7c:24:9f brd ff:ff:ff:ff:ff:ff</div><div id="yui_3_16_0_ym19_1_1476828861073_3150"> inet 10.11.0.2/21 brd 10.11.7.255 scope global eth1.11</div><div id="yui_3_16_0_ym19_1_1476828861073_3151"> valid_lft forever preferred_lft forever</div><div id="yui_3_16_0_ym19_1_1476828861073_3152"> inet6 fe80::ba38:61ff:fe7c:249f/64 scope link </div><div id="yui_3_16_0_ym19_1_1476828861073_3153"> valid_lft forever preferred_lft forever</div><div id="yui_3_16_0_ym19_1_1476828861073_3154">7: virbr0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default </div><div id="yui_3_16_0_ym19_1_1476828861073_3155"> link/ether 9a:3c:ae:a4:ab:77 brd ff:ff:ff:ff:ff:ff</div><div id="yui_3_16_0_ym19_1_1476828861073_3156"> inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0</div><div id="yui_3_16_0_ym19_1_1476828861073_3157"> valid_lft forever preferred_lft forever</div><div id="yui_3_16_0_ym19_1_1476828861073_3158">root@ubuntu-28:/etc# netstat -rn</div><div id="yui_3_16_0_ym19_1_1476828861073_3159">Kernel IP routing table</div><div id="yui_3_16_0_ym19_1_1476828861073_3160">Destination Gateway Genmask Flags MSS Window irtt Iface</div><div id="yui_3_16_0_ym19_1_1476828861073_3161">0.0.0.0 10.0.10.1 0.0.0.0 UG 0 0 0 eth0</div><div id="yui_3_16_0_ym19_1_1476828861073_3162">10.0.0.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1</div><div id="yui_3_16_0_ym19_1_1476828861073_3163">10.0.10.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0</div><div id="yui_3_16_0_ym19_1_1476828861073_3164">10.0.20.0 10.0.10.1 255.255.255.0 UG 0 0 0 eth0</div><div id="yui_3_16_0_ym19_1_1476828861073_3165">10.11.0.0 0.0.0.0 255.255.248.0 U 0 0 0 eth1.11</div><div id="yui_3_16_0_ym19_1_1476828861073_3166">100.120.120.5 10.0.10.1 255.255.255.255 UGH 0 0 0 eth0</div><div id="yui_3_16_0_ym19_1_1476828861073_3167">169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth3</div><div id="yui_3_16_0_ym19_1_1476828861073_3168">192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0</div><div id="yui_3_16_0_ym19_1_1476828861073_3169"><br id="yui_3_16_0_ym19_1_1476828861073_3170"></div><div id="yui_3_16_0_ym19_1_1476828861073_3171"><span id="yui_3_16_0_ym19_1_1476828861073_3172">ipsec.conf</span></div><div id="yui_3_16_0_ym19_1_1476828861073_3173"><br id="yui_3_16_0_ym19_1_1476828861073_3174"></div><div id="yui_3_16_0_ym19_1_1476828861073_3175">conn %default</div><div id="yui_3_16_0_ym19_1_1476828861073_3176"> rekey=no</div><div id="yui_3_16_0_ym19_1_1476828861073_3177"> ikelifetime=25m</div><div id="yui_3_16_0_ym19_1_1476828861073_3178"> keylife=0</div><div id="yui_3_16_0_ym19_1_1476828861073_3179"> rekeymargin=2m</div><div id="yui_3_16_0_ym19_1_1476828861073_3180"> rekeyfuzz=0%</div><div id="yui_3_16_0_ym19_1_1476828861073_3181"> keyingtries=1</div><div id="yui_3_16_0_ym19_1_1476828861073_3182"> keyexchange=ikev2</div><div id="yui_3_16_0_ym19_1_1476828861073_3183"> dpdaction=clear</div><div id="yui_3_16_0_ym19_1_1476828861073_3184"> dpddelay=270</div><div id="yui_3_16_0_ym19_1_1476828861073_3185"> mobike=no</div><div id="yui_3_16_0_ym19_1_1476828861073_3186"> </div><div id="yui_3_16_0_ym19_1_1476828861073_3187">conn certs-only</div><div id="yui_3_16_0_ym19_1_1476828861073_3188"> left=testcert.com</div><div id="yui_3_16_0_ym19_1_1476828861073_3189"> leftcert=testcert.cer</div><div id="yui_3_16_0_ym19_1_1476828861073_3190"> leftid=@testcert.com</div><div id="yui_3_16_0_ym19_1_1476828861073_3191"> leftsubnet=0.0.0.0/0</div><div id="yui_3_16_0_ym19_1_1476828861073_3192"> leftfirewall=yes</div><div id="yui_3_16_0_ym19_1_1476828861073_3193"> ike=aes128-sha1-modp1024!</div><div id="yui_3_16_0_ym19_1_1476828861073_3194"> esp=aes128-sha1!</div><div id="yui_3_16_0_ym19_1_1476828861073_3195"> leftauth=rsasig</div><div id="yui_3_16_0_ym19_1_1476828861073_3196"> rightauth=rsasig</div><div id="yui_3_16_0_ym19_1_1476828861073_3197"> rightid=%any</div><div id="yui_3_16_0_ym19_1_1476828861073_3198"> rightsourceip=100.120.120.0/24</div><div>
</div><div dir="ltr" id="yui_3_16_0_ym19_1_1476828861073_3199"> auto=add</div></div></body></html>