[strongSwan] Explicit module loading on charon

Claude Tompers claude.tompers at restena.lu
Tue Aug 10 07:40:10 CEST 2010


Hi Martin,

Yes, I'm using IKEv1 too, sorry, I forgot to mention that.
Disabling socket-default in configure did the job.

thanks a lot for your help.

regards,
Claude


On Monday 09 August 2010 17:15:53 Martin Willi wrote:
> Hi Claude,
> 
> > [...] socket-default socket-raw
> > It simply seems to ignore connection attempts.
> 
> Having two socket implementations is problematic and the daemon might
> ignore the packet completely.
> 
> >         --enable-nat-transport \
> >         --enable-cisco-quirks \
> 
> Are you using IKEv1, too? These are pluto specific options.
> 
> >         --enable-socket-raw
> 
> What's the reason for enabling the raw socket? Using the default is just
> fine (socket-default if pluto disabled, socket-raw otherwise).
> 
> If you enforce socket-raw for some reasons, you should disable
> socket-default.
> 
> Regards
> Martin
> 
> 

-- 
Claude Tompers
Ingénieur réseau et système
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.strongswan.org/pipermail/users/attachments/20100810/513f098e/attachment.pgp>


More information about the Users mailing list