[Swan] Dynamic Hosts

John Crisp jcrisp at safeandsoundit.co.uk
Tue Dec 1 17:51:33 UTC 2015


On 29/11/15 02:52, John Crisp wrote:

>>
>> If you use rightid=@remote.dyndns.org and leftid=@local.dyndns.org then
>> use in ipsec.secrets:
>>
>> @remote.dyndns.org @local.dyndns.org : PSK "yoursecret"
>>
> 

Sussed it.... grrrr. There are none so blind as those who cannot see.

Will post our notes up on the wiki.

> 
> As a side issue we also saw a few errors in the logs whilst testing ike v2 :
> 
> 3.15
> 
> On static :
> EXPECTATION FAILED at
> /home/john/rpmbuild/BUILD/libreswan-3.15/programs/pluto/ikev2_parent.c:3930:
> !IS_CHILD_SA(st)
> 
> On Dynamic :
> EXPECTATION FAILED at
> /home/john/rpmbuild/BUILD/libreswan-3.15/programs/pluto/ikev1.c:2843: r
> != NULL
> 

We've had these a few times on failed connections.

Any ideas ?


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: OpenPGP digital signature
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20151201/5010842a/attachment.sig>


More information about the Swan mailing list