[strongSwan] strongswan 5.0.1 ipsec configuration load issue

yordanos beyene yordanosb at gmail.com
Thu Jan 24 01:06:42 CET 2013


Hi Noel,

I removed "config setup", but I am still getting the same error. This same
configuration worked for me in 5.0.0. After I upgrade to 5.0.1, I can't
seem to load any ipsec.conf. See the error and the ipsec.conf.

====
Starting strongSwan 5.0.0 IPsec [starter]...
ipsec.conf:3: syntax error [
]
unable to start strongSwan -- fatal errors in config
root at jor:~#

root at jor:~# more ipsec.conf
# /etc/ipsec.conf - strongSwan IPsec configuration file

conn %default
        ikelifetime=60m
        keylife=20m
        rekeymargin=3m
        keyingtries=1
        keyexchange=ikev1
        authby=secret
        aggressive=yes

conn rw
        left=192.168.0.1
        leftsubnet=10.1.0.0/16
        leftid=@moon.strongswan.org
        leftfirewall=yes
        right=%any
        auto=add

Thanks!
Jordan.



On Wed, Jan 23, 2013 at 3:29 PM, Noel Kuntze <noel at familie-kuntze.de> wrote:

> Hello Yordanos,
>
> You need to enter some configuration informatione in the "config setup"
> section or take it out of the configuration.
>
>
> Regards,
>
> Noel Kuntze
>
>
> Am 24.01.2013 00:12, schrieb yordanos beyene:
> >
> > Hi Everyone,
> >
> > I am unable to load strongswan.conf after I upgraded from SS v5.0.0 to
> > SS v 5.0.0.  See an example below.
> > Any tips how to resolve this issue. Was there any enhancement or
> > change from version 5.0.0. that may be affecting and I need to import.
> >
> > ##### ipsec.conf load error #####
> > root at jor:~# ipsec start
> > Starting strongSwan 5.0.0 IPsec [starter]...
> > /var/tmp/shells/ipsec.conf:3: syntax error [
> > ]
> > unable to start strongSwan -- fatal errors in config
> > root at jor:~#
> >
> > ####ipsec.conf is below ; line 3 refers to the start of "config
> > setup"#####
> >
> > root at jor:~# more /etc/ipsec.conf
> > # /etc/ipsec.conf - strongSwan IPsec configuration file
> >
> > config setup
> >
> > conn %default
> >         ikelifetime=60m
> >         keylife=20m
> >         rekeymargin=3m
> >         keyingtries=1
> >         keyexchange=ikev1
> >         authby=secret
> >         aggressive=yes
> >
> > conn rw
> >         left=192.168.0.1
> >         leftsubnet=10.1.0.0/16 <http://10.1.0.0/16>
> >         leftid=@moon.strongswan.org <http://moon.strongswan.org>
> >         leftfirewall=yes
> >         right=%any
> >         auto=add
> >
> >
> > I appreciate any help.
> >
> >
> > Thanks!
> >
> > Jordan.
> >
> >
> > _______________________________________________
> > Users mailing list
> > Users at lists.strongswan.org
> > https://lists.strongswan.org/mailman/listinfo/users
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20130123/6755c6a9/attachment.html>


More information about the Users mailing list