Hi,
a while back a i used a ipsec tunnel to get ipv6 access (using a ipv6 default route over ipsec) but for some reason it fails to set the route in version 8.050)
SA: 2001:610:728:5::/64=82.72.236.209 77.222.76.140=::/0
some more info:
errors in ipsec log:
2010:10:25-10:59:15 ranger pluto[6107]: updown: /sbin/ip -4 rule add to ::/0 from 2001:610:728:5::/64 table ipsec pref 32765 failed with status 1:
2010:10:25-10:59:15 ranger pluto[6107]: updown: Error: an inet prefix is expected rather than "::/0".
2010:10:25-10:59:15 ranger pluto[6107]: updown: /sbin/ip -4 route replace ::/1 dev eth1 table ipsec src 2001:610:728:5::1 proto ipsec failed with status 1:
2010:10:25-10:59:15 ranger pluto[6107]: updown: Error: an inet prefix is expected rather than "::/1".
2010:10:25-10:59:15 ranger pluto[6107]: updown: /sbin/ip -4 route replace 8000::/1 dev eth1 table ipsec src 2001:610:728:5::1 proto ipsec failed with status 1:
2010:10:25-10:59:15 ranger pluto[6107]: updown: Error: an inet prefix is expected rather than "8000::/1".
ip r s t all:
172.17.0.0/16 dev eth1 table ipsec proto ipsec scope link src 172.20.2.1
default via 82.72.236.1 dev eth1 table 200 proto kernel onlink
82.72.236.0/23 dev eth1 proto kernel scope link src 82.72.236.209
127.0.0.0/8 dev lo scope link
172.16.95.0/24 dev eth0 proto kernel scope link src 172.16.95.1
172.16.99.0/24 dev eth1 proto ipsec scope link src 172.20.0.1
172.20.0.0/24 dev eth0 proto kernel scope link src 172.20.0.1
172.20.1.0/24 dev eth2 proto kernel scope link src 172.20.1.1
172.20.2.0/24 dev eth3 proto kernel scope link src 172.20.2.1
192.168.0.0/24 dev wlan1 proto kernel scope link src 192.168.0.1
default via 82.72.236.1 dev eth1 table default proto kernel onlink
broadcast 82.72.236.0 dev eth1 table local proto kernel scope link src 82.72.236.209
local 82.72.236.209 dev eth1 table local proto kernel scope host src 82.72.236.209
broadcast 82.72.237.255 dev eth1 table local proto kernel scope link src 82.72.236.209
broadcast 127.0.0.0 dev lo table local proto kernel scope link src 127.0.0.1
local 127.0.0.0/8 dev lo table local proto kernel scope host src 127.0.0.1
local 127.0.0.1 dev lo table local proto kernel scope host src 127.0.0.1
broadcast 127.255.255.255 dev lo table local proto kernel scope link src 127.0.0.1
broadcast 172.16.95.0 dev eth0 table local proto kernel scope link src 172.16.95.1
local 172.16.95.1 dev eth0 table local proto kernel scope host src 172.16.95.1
broadcast 172.16.95.255 dev eth0 table local proto kernel scope link src 172.16.95.1
broadcast 172.20.0.0 dev eth0 table local proto kernel scope link src 172.20.0.1
local 172.20.0.1 dev eth0 table local proto kernel scope host src 172.20.0.1
broadcast 172.20.0.255 dev eth0 table local proto kernel scope link src 172.20.0.1
broadcast 172.20.1.0 dev eth2 table local proto kernel scope link src 172.20.1.1
local 172.20.1.1 dev eth2 table local proto kernel scope host src 172.20.1.1
broadcast 172.20.1.255 dev eth2 table local proto kernel scope link src 172.20.1.1
broadcast 172.20.2.0 dev eth3 table local proto kernel scope link src 172.20.2.1
local 172.20.2.1 dev eth3 table local proto kernel scope host src 172.20.2.1
broadcast 172.20.2.255 dev eth3 table local proto kernel scope link src 172.20.2.1
broadcast 192.168.0.0 dev wlan1 table local proto kernel scope link src 192.168.0.1
local 192.168.0.1 dev wlan1 table local proto kernel scope host src 192.168.0.1
broadcast 192.168.0.255 dev wlan1 table local proto kernel scope link src 192.168.0.1
unreachable default dev lo table unspec proto kernel metric -1 error -101 hoplimit 255
2001:610:728:5::/64 dev eth0 proto kernel metric 256 mtu 1500 advmss 1440 hoplimit 0
fe80::/64 dev redw0 proto kernel metric 256 mtu 1500 advmss 1440 hoplimit 0
fe80::/64 dev redw0.100 proto kernel metric 256 mtu 1500 advmss 1440 hoplimit 0
fe80::/64 dev redw0.101 proto kernel metric 256 mtu 1500 advmss 1440 hoplimit 0
fe80::/64 dev eth0 proto kernel metric 256 mtu 1500 advmss 1440 hoplimit 0
fe80::/64 dev wlan1 proto kernel metric 256 mtu 1500 advmss 1440 hoplimit 0
unreachable default dev lo table unspec proto kernel metric -1 error -101 hoplimit 255
local ::1 via :: dev lo table local proto unspec metric 0 mtu 16436 advmss 16376 hoplimit 0
local 2001:610:728:5:: via :: dev lo table local proto unspec metric 0 mtu 16436 advmss 16376 hoplimit 0
local 2001:610:728:5::1 via :: dev lo table local proto unspec metric 0 mtu 16436 advmss 16376 hoplimit 0
local fe80:: via :: dev lo table local proto unspec metric 0 mtu 16436 advmss 16376 hoplimit 0
local fe80:: via :: dev lo table local proto unspec metric 0 mtu 16436 advmss 16376 hoplimit 0
local fe80:: via :: dev lo table local proto unspec metric 0 mtu 16436 advmss 16376 hoplimit 0
local fe80:: via :: dev lo table local proto unspec metric 0 mtu 16436 advmss 16376 hoplimit 0
local fe80:: via :: dev lo table local proto unspec metric 0 mtu 16436 advmss 16376 hoplimit 0
local fe80::21a:8cff:fe10:c544 via :: dev lo table local proto unspec metric 0 mtu 16436 advmss 16376 hoplimit 0
local fe80::b4c6:47ff:fe8e:865a via :: dev lo table local proto unspec metric 0 mtu 16436 advmss 16376 hoplimit 0
local fe80::b4c6:47ff:fe8e:865a via :: dev lo table local proto unspec metric 0 mtu 16436 advmss 16376 hoplimit 0
local fe80::b4c6:47ff:fe8e:865a via :: dev lo table local proto unspec metric 0 mtu 16436 advmss 16376 hoplimit 0
local fe80::b4c6:47ff:fe8e:865a via :: dev lo table local proto unspec metric 0 mtu 16436 advmss 16376 hoplimit 0
ff00::/8 dev redw0 table local metric 256 mtu 1500 advmss 1440 hoplimit 0
ff00::/8 dev redw0.100 table local metric 256 mtu 1500 advmss 1440 hoplimit 0
ff00::/8 dev redw0.101 table local metric 256 mtu 1500 advmss 1440 hoplimit 0
ff00::/8 dev eth0 table local metric 256 mtu 1500 advmss 1440 hoplimit 0
ff00::/8 dev wlan1 table local metric 256 mtu 1500 advmss 1440 hoplimit 0
unreachable default dev lo table unspec proto kernel metric -1 error -101 hoplimit 255
ip a:
1: lo: mtu 16436 qdisc noqueue state UNKNOWN
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
inet6 ::1/128 scope host
valid_lft forever preferred_lft forever
2: eth0: mtu 1500 qdisc pfifo_fast state UP qlen 1000
link/ether 00:1a:8c:10:c5:44 brd ff:ff:ff:ff:ff:ff
inet 172.20.0.1/24 brd 172.20.0.255 scope global eth0
inet 172.16.95.1/24 scope global eth0
inet6 2001:610:728:5::1/64 scope global
valid_lft forever preferred_lft forever
inet6 fe80::21a:8cff:fe10:c544/64 scope link
valid_lft forever preferred_lft forever
3: eth1: mtu 576 qdisc pfifo_fast state UP qlen 1000
link/ether 00:1a:8c:10:c5:45 brd ff:ff:ff:ff:ff:ff
inet 82.72.236.209/23 brd 255.255.255.255 scope global eth1
4: eth2: mtu 1500 qdisc pfifo_fast state DOWN qlen 1000
link/ether 00:1a:8c:10:c5:46 brd ff:ff:ff:ff:ff:ff
inet 172.20.1.1/24 brd 172.20.1.255 scope global eth2
5: eth3: mtu 1500 qdisc pfifo_fast state DOWN qlen 1000
link/ether 00:1a:8c:10:c5:47 brd ff:ff:ff:ff:ff:ff
inet 172.20.2.1/24 brd 172.20.2.255 scope global eth3
6: redw0: mtu 1500 qdisc noqueue state UNKNOWN
link/ether b6:c6:47:8e:86:5a brd ff:ff:ff:ff:ff:ff
inet6 fe80::b4c6:47ff:fe8e:865a/64 scope link
valid_lft forever preferred_lft forever
7: wlan0: mtu 1500 qdisc noop state DOWN
link/ether b6:c6:47:8e:86:5a brd ff:ff:ff:ff:ff:ff
8: wlan1: mtu 1500 qdisc noqueue state UNKNOWN
link/ether b6:c6:47:8e:86:5a brd ff:ff:ff:ff:ff:ff
inet 192.168.0.1/24 brd 192.168.0.255 scope global wlan1
inet6 fe80::b4c6:47ff:fe8e:865a/64 scope link
valid_lft forever preferred_lft forever
9: redw0.100@redw0: mtu 1500 qdisc noqueue state UP
link/ether b6:c6:47:8e:86:5a brd ff:ff:ff:ff:ff:ff
inet6 fe80::b4c6:47ff:fe8e:865a/64 scope link
valid_lft forever preferred_lft forever
10: redw0.101@redw0: mtu 1500 qdisc noqueue state UP
link/ether b6:c6:47:8e:86:5a brd ff:ff:ff:ff:ff:ff
inet6 fe80::b4c6:47ff:fe8e:865a/64 scope link
valid_lft forever preferred_lft forever
Guest User!
You are not Sophos Staff.
