[strongSwan] unable to allocate SPI's From kernel

anand rao anandrao_me at yahoo.co.in
Tue Aug 24 10:51:05 CEST 2010


   I am trying a host to host IKE v2 setup. I am facing following error whenever 
i tried to do "ipsec up host-host"

  initiating IKE_SA host-host[1] to
generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]
sending packet: from[500] to[500]
received packet: from[500] to[500]
parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]
authentication of '' (myself) with pre-shared key
establishing CHILD_SA host-host
unable to allocate SPIs from kernel

strongswan version I am using is 4.3.6
My kernel version is 2.6.21

Attached is the .config file of my kernel configuration. Please help me if I am 
missing anything.

also attached is my my ipsec.conf and strongswan.conf files.



More information about the Users mailing list