<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Paul,<br>
<br>
A few of us are trying to develop a front end for this/Openswan in
ClearOS, and one person has tried LibreSwan and he got the same
thing. If you look in Oguz Yilmaz's log you will see:<br>
<br>
<pre wrap="">Jan 2 10:18:28 2013 pluto[18211]: \"myvpn/0x2\" #2: route-client
output: <i class="moz-txt-slash"><span class="moz-txt-tag">/</span>usr/libexec/ipsec<span class="moz-txt-tag">/</span></i>_updown.netkey: doroute `ip route replace
192.168.2.0/24 via 10.46.1.5 dev lo src 10.46.1.5\' failed (RTNETLINK
answers: No such process)
</pre>
The person's comment is "The only bad news is that the
/usr/libexec/ipsec/_updown.netkey appears to have been modified,
such that the local route from the gateway fails as it attempts to
use the 'lo' interface rather than the default route... still
investigating why this differes between packages"<br>
<br>
HTH,<br>
<br>
Nick<br>
<br>
<div class="moz-cite-prefix">On 03/01/2013 23:36, Paul Wouters
wrote:<br>
</div>
<blockquote cite="mid:alpine.LFD.2.03.1301031836210.3191@redhat.com"
type="cite">
<br>
On Fri, 4 Jan 2013, Oguz Yilmaz wrote:
<br>
<br>
<blockquote type="cite">2 is resolved as I said. But
<br>
<br>
1- Why it takes about 2 minutes after restart of ipsec to
establish connection?
<br>
<br>
continues.
<br>
</blockquote>
<br>
That should not be the case. If you can provide some logs that we
can
<br>
investigate.
<br>
<br>
Paul
<br>
_______________________________________________
<br>
Swan mailing list
<br>
<a class="moz-txt-link-abbreviated" href="mailto:Swan@lists.libreswan.org">Swan@lists.libreswan.org</a>
<br>
<a class="moz-txt-link-freetext" href="https://lists.libreswan.org/mailman/listinfo/swan">https://lists.libreswan.org/mailman/listinfo/swan</a>
<br>
</blockquote>
<br>
</body>
</html>