[Swan] Problem in reestablishment of an ipsec connection

Paul Wouters paul at nohats.ca
Tue Jan 1 04:02:33 EET 2013


On Tue, 1 Jan 2013, Oguz Yilmaz wrote:

> Dec 31 15:10:13 2012 pluto[21253]: \"myvpn/0x1\" #24: STATE_QUICK_R2:
> IPsec SA established tunnel mode {ESP=>0x4888824c <0x23d4417b
> xfrm=3DES_0-HMAC_MD5 NATOA=none NATD=none DPD=enabled}

>        rightsubnets={10.0.0.0/8}

This syntax truggers the alias code, which might not be expecting only
one entry. Can you change this to:

 	rightsubnet=10.0.0.0/8

Note the singular subnet, not the plural subnetS

Then do a full restart, eg ipsec setup restart. If that fails, you
might need to share a little bit more log information.

Paul


More information about the Swan mailing list