[strongSwan] forecast iptables commit failed: Invalid argument

[Meduri Siva Prasad]

Hi Martin, 

Can you please share the ipsec configuration files that you used on x86 architecture, so that we can check if we are missing any generic or architecture specific dependencies.

Thanks

Regards,
Siva

-----Original Message-----
From: Meduri Siva Prasad-B51161 
Sent: Thursday, June 18, 2015 3:55 PM
To: 'Martin Willi'
Cc: users at lists.strongswan.org; Chaitanya Sakinam-B36933; Pothuganti Sridhar-B38513
Subject: RE: [strongSwan] forecast iptables commit failed: Invalid argument

Hi Martin,

Thanks for the reply. We are working on ARM platform with kernel 3.2. Kernel also supports udp/esp as match fields and MARK as target. Any inputs for debugging will be a great help.
BTW we are testing this in site-to-site deployment. But as per documentation, it talks only for client-to-site deployments. Does this work in site-to-site deployments? 

Regards,
Siva

-----Original Message-----
From: Martin Willi [mailto:martin at strongswan.org] 
Sent: Thursday, June 18, 2015 1:48 PM
To: Meduri Siva Prasad-B51161
Cc: users at lists.strongswan.org; Chaitanya Sakinam-B36933; Pothuganti Sridhar-B38513
Subject: Re: [strongSwan] forecast iptables commit failed: Invalid argument

Hi,

> OpenWrt daemon.info charon: 15[CFG] forecast iptables commit failed: 
> Invalid argument

Please check that your kernel supports the MARK target and the udp/esp matches.

What architecture is OpenWRT running on? Not unlikely that it is an alignment issue, I didn't test the plugin beyond x86/x64.

Regards
Martin