[strongSwan] errors on freebsd

[Randy Wyatt]

Tobias,


On Fri, Jul 17, 2015 at 12:43 AM, Tobias Brunner <tobias at strongswan.org>
wrote:

> Hi Randy,
>
> > Jul 15 19:50:14 saturn charon: 01[KNL] can't install route for
> > 70.209.XXX.YYY/32[
> > udp/l2f] === 104.236.XXX.YYY/32[udp/l2f] in, conflicts with IKE traffic
>
> You seem to be using the kernel-libipsec plugin.  Why?  Just use the
> kernel-pfkey and kernel-pfroute plugins.
>
>    This package was installed from the binary (pkg install strongswan).  I
will check and compile from source.

> and the dmesg has the following error:
> > ipsec_common_input: no key association found for SA
> > 104.236.XXX.YYY/c5979d22/50
>
> That's because the kernel has no knowledge of any IPsec SAs as the
> kernel-libipsec plugin creates them in userland.
>
> > How do I resolve this?  It's for L2TP,  and I have no choice.
>
> How so?  What's your client?
>
Windows 7.  I only have to support 1 client at a time.  I am moving all
services to a cheaper box.


>
> Regards,
> Tobias
>
>
Thank you,
Regards,
Randy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20150717/fd2bf293/attachment.html>