[Swan-dev] What does "missing v2CP reply" mean?

Brady Johnson bradyjoh at redhat.com
Fri Feb 16 17:12:20 EET 2024


I included the configuration in the original email, and it did not include
"narrowing", nor "leftmodecfgclient". I'll check if either of those are set
by default.

Would it have been better to send this email to "Libreswan users"?

Regards,

*Brady Johnson*
Principal Software Engineer
Telco Verification Ecosystems Engineering
brady.johnson at redhat.com



On Fri, Feb 16, 2024 at 4:07 PM Paul Wouters <paul at nohats.ca> wrote:

> On Fri, 16 Feb 2024, Brady Johnson via Swan-dev wrote:
>
> > Subject: Re: [Swan-dev] What does "missing v2CP reply" mean?
> >
> > Would it be more helpful to enable debug logging? Or is there some other
> test that could be done
> > to figure this out?
>
> It seems your peer has not been configured to hand out IP addresses and
> DNS, and you have asked for it. This assumes you specified something
> like:
>
>         narrowing=yes
>         leftmodecfgclient=yes
>         leftsubnet=0.0.0.0/0
>         rightsubnet=0.0.0.0/0
>
> So this is a configuration mismatch, not a code bug for which we need
> more debugging. You just need to figure out what the peer wants and
> if that's what you want and how to update your configuration.
>
> Paul
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan-dev/attachments/20240216/3d0619e8/attachment.htm>


More information about the Swan-dev mailing list