<div dir="ltr">Hello Paul,<div><br></div><div>Thank you very much for your response. I installed a new version of Debian which is supposed to have support for ipsec Libreswan. But still continue have some additional issues. Following are the details regarding the issue observed.</div><div><br></div><div><div><b>$uname -r</b></div><div>4.9.82-ti-r102</div></div><div><br></div><div><div><b>$uname -a</b></div><div>Linux beaglebone 4.9.82-ti-r102 #1 SMP PREEMPT Thu Feb 22 01:16:12 UTC 2018 armv7l GNU/Linux</div></div><div><br></div><div><div><b>$ipsec verify </b></div><div>Verifying installed system and configuration files</div><div><br></div><div>Version check and ipsec on-path <span style="white-space:pre"> </span>[OK]</div><div>Libreswan v3.23-dirty-17510eef70f0c2c18fcd5f1bb4eb447aa931733e (netkey) on 4.9.82-ti-r102</div><div>Checking for IPsec support in kernel <span style="white-space:pre"> </span>[OK]</div><div> NETKEY: Testing XFRM related proc values</div><div> ICMP default/send_redirects <span style="white-space:pre"> </span>[OK]</div><div> ICMP default/accept_redirects <span style="white-space:pre"> </span>[OK]</div><div> XFRM larval drop <span style="white-space:pre"> </span>[OK]</div><div>Pluto ipsec.conf syntax <span style="white-space:pre"> </span>[OK]</div><div>Two or more interfaces found, checking IP forwarding<span style="white-space:pre"> </span>[OK]</div><div>Checking rp_filter <span style="white-space:pre"> </span>[OK]</div><div>Checking that pluto is running <span style="white-space:pre"> </span>[FAILED]</div><div>Checking 'ip' command <span style="white-space:pre"> </span>[OK]</div><div>Checking 'iptables' command <span style="white-space:pre"> </span>[OK]</div><div>Checking 'prelink' command does not interfere with FIPS<span style="white-space:pre"> </span>[OK]</div><div>Checking for obsolete ipsec.conf options <span style="white-space:pre"> </span>[OK]</div></div><div><b><br></b></div><div><div><b>$ipsec status</b></div><div>whack: Pluto is not running (no "/run/pluto/pluto.ctl")</div></div><div><b><br></b></div><div><div><b> $systemctl status ipsec.service</b></div><div>● ipsec.service - Internet Key Exchange (IKE) Protocol Daemon for IPsec</div><div> Loaded: loaded (/lib/systemd/system/ipsec.service; enabled; vendor preset: en</div><div> Active: activating (start-pre) since Thu 2018-03-29 04:31:49 UTC; 1s ago</div><div> Docs: man:ipsec(8)</div><div> man:pluto(8)</div><div> man:ipsec.conf(5)</div><div> Process: 17567 ExecStopPost=/usr/local/sbin/ipsec --stopnflog (code=exited, st</div><div> Process: 17564 ExecStopPost=/sbin/ip xfrm state flush (code=exited, status=0/S</div><div> Process: 17561 ExecStopPost=/sbin/ip xfrm policy flush (code=exited, status=0/</div><div> Process: 17536 ExecStart=/usr/local/libexec/ipsec/pluto --leak-detective --con</div><div> Process: 17523 ExecStartPre=/usr/local/sbin/ipsec --checknflog (code=exited, s</div><div> Process: 17520 ExecStartPre=/usr/local/sbin/ipsec --checknss (code=exited, sta</div><div> Process: 17575 ExecStartPre=/usr/local/libexec/ipsec/addconn --config /etc/ips</div><div> Main PID: 17536 (code=exited, status=9); Control PID: 17578 (_stackmanager)</div><div> Tasks: 3 (limit: 4915)</div><div> CGroup: /system.slice/ipsec.service</div><div> └─control</div><div> ├─17578 /bin/sh /usr/local/libexec/ipsec/_stackmanager start</div><div> └─17746 modprobe --quiet --use-blacklist esp4</div></div><div><br></div><div><br></div><div>Can you please help me resolve this problem. I would really appreciate your support if you can help me with some directions on what to resolve.</div><div><br></div><div>Thank you very much for your time in advance.</div><div><br></div><div>Regards,</div><div>Sriram Yarlagadda</div><div><br></div><div><br></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Mar 26, 2018 at 7:54 AM, Paul Wouters <span dir="ltr"><<a href="mailto:paul@nohats.ca" target="_blank">paul@nohats.ca</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On Fri, 23 Mar 2018, Sriram Yarlagadda wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
i am observing the following errors when i tried starting the IPSEC service<br>
</blockquote>
<br>
</span><span class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Process: 114278 ExecStartPre=/usr/local/libexe<wbr>c/ipsec/_stackmanager start (code=exited, status=1/FAILURE)<br>
</blockquote>
<br>
<br></span>
the stackmanager failed to insert or see the proper kernel modules.<br>
Likely your kernel does not support (inline or via module) some of<br>
the IPsec / crypto requirements.<span class="HOEnZb"><font color="#888888"><br>
<br>
Paul<br>
</font></span></blockquote></div><br></div>