<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace">I built libreswan 3.25 on Raspbian to be consistent with the "other" IPSec box I'm trying to establish a peer-to-peer connection with. This wasn't exactly painless. There appears to be a Red Hat bias to the build instructions.<br /> <br /> Anyway, after I installed libreswan 3.25 and ran ipsec.service, I then ran:<br /> <br /> <span style="color: #0000ff;"><strong># ipsec verify</strong></span><br /> <br /> and got: "<span style="color: #ff0000;">Pluto listening for IKE on udp 500 [FAILED]</span>".<br /> <br /> BUT, if I run:<br /> <br /> <span style="color: #0000ff;"><strong># lsof -i UDP:500</strong></span><br /><span style="color: #0000ff;"> pluto 6139 root 15u IPv4 52975 0t0 UDP 192.168.254.3:isakmp</span></div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"> </div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"><span style="color: #000000;">or:</span></div>
<div class="pre" style="margin: 0; padding: 0; font-family: monospace"><br /> <span style="color: #0000ff;"><strong># netstat -tunlp</strong></span><br /><span style="color: #0000ff;"> COMMAND PID USER FD TYPE DEVICE SIZE/OFF NODE NAME</span><br /><span style="color: #0000ff;"> pluto 6139 root 15u IPv4 52975 0t0 UDP 192.168.254.3:isakmp</span> <br /> <br /> Both tell me that <span style="color: #0000ff;">pluto</span> is listening on port 500 using UDP.<br /> <br /> Is "<span style="color: #0000ff;">ipsec verify</span>" lying to me?</div>
</body></html>