[Swan-dev] What does "missing v2CP reply" mean?

[Brady Johnson]

We tried several changes to the client nmstate configuration. Setting
"ipv4: dhcp: false" caused a configuration error in nmstate. We have
created a bug for that and the nmstate team is working on it.

Then, we tried with the same client nmstate configuration, but added
"leftmodecfgclient: false" and this allowed us to establish the tunnel.

So, apparently, the "ipv4: dhcp: true" nmstate configuration causes the
client to request IP addresses and DNS. And setting "leftmodecfgclient:
false" overrides that in the nmstate configuration.

Thanks,

*Brady Johnson*
Principal Software Engineer
Telco Verification Ecosystems Engineering
brady.johnson at redhat.com



On Thu, Feb 22, 2024 at 10:04 PM Andrew Cagney via Swan-dev <
swan-dev at lists.libreswan.org> wrote:

> On Fri, 16 Feb 2024 at 10:18, Tuomo Soini via Swan-dev
> <swan-dev at lists.libreswan.org> wrote:
> >
> > On Fri, 16 Feb 2024 16:12:20 +0100
> > Brady Johnson via Swan-dev <swan-dev at lists.libreswan.org> wrote:
> >
> > > I included the configuration in the original email, and it did not
> > > include "narrowing", nor "leftmodecfgclient". I'll check if either of
> > > those are set by default.
> >
> > My guess is that "dhcp" in NetworkManager configuration might cause
> > this.
>
> I didn't see a hint of that in the posted config.
>
> How does <<ipsec connectionstatus>> line up with ikev2_cp.c and the
> logic for when to send/receive a CP payload?
>
> > > Would it have been better to send this email to "Libreswan users"?
> >
> > Maybe?
>
> I don't think it matters.
> _______________________________________________
> Swan-dev mailing list
> Swan-dev at lists.libreswan.org
> https://lists.libreswan.org/mailman/listinfo/swan-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan-dev/attachments/20240227/5f229353/attachment.htm>