[strongSwan] route-client error

[Claude Tompers]

Hi, 

I've compiled strongswan with user vpn and group vpn.
Now, if I'm doing an IKEv1 connection from a Cisco client, I can see some errors in the logs:

Jul  2 11:04:30 vpn6-test pluto[27220]: "cisco-vpn"[6] 192.168.3.18:54215 #6: route-client output: Not sufficient rights to flush
Jul  2 11:04:30 vpn6-test pluto[27220]: "cisco-vpn"[6] 192.168.3.18:54215 #6: route-client command exited with status 1

Jul  2 11:04:41 vpn6-test pluto[27220]: "cisco-vpn"[6] 192.168.3.18:54215 #6: ERROR: netlink response for Del SA esp.b985df50 at 192.168.1.13 included errno 3: No such process
Jul  2 11:04:46 vpn6-test pluto[27220]: "cisco-vpn"[6] 192.168.3.18:54215 #5: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0x847d2df8) not found (maybe expired)
Jul  2 11:04:46 vpn6-test pluto[27220]: "cisco-vpn"[6] 192.168.3.18:54215 #5: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0xb985df50) not found (maybe expired)

The Cisco client says that the connection was successful though but the traffic seems not to be decrypted and forwarded afterwards.

Any helpful ideas ?

Thanks in advance


kind regards
Claude

-- 
Claude Tompers
Ingénieur réseau et système
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.strongswan.org/pipermail/users/attachments/20100702/8c32e56a/attachment.pgp>