I am trying to setup a Net 2 Net VPN.
Running Astaro 3.208
Here is the log entry showing errors.
Sep 5 10:16:45 adsl-203-15-140-27 ipsec_setup: Starting FreeS/WAN IPsec 1.96...
Sep 5 10:16:45 adsl-203-15-140-27 ipsec_setup: KLIPS debug `none'
Sep 5 10:16:46 adsl-203-15-140-27 ipsec_setup: ...FreeS/WAN IPsec started
Sep 5 10:16:46 adsl-203-15-140-27 ipsec__plutorun: Starting Pluto subsystem...
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: Starting Pluto (FreeS/WAN Version 1.96)
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: including X.509 patch (Version 0.9.9)
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | opening /dev/urandom
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | inserting event EVENT_REINIT_SECRET, timeout in 3600 seconds
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | process 12257 listening for PF_KEY_V2 on file descriptor 6
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | finish_pfkey_msg: SADB_REGISTER message 1 for AH
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | 02 07 00 02 02 00 00 00 01 00 00 00 e1 2f 00 00
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | pfkey_get: SADB_REGISTER message 1
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | AH registered with kernel.
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | finish_pfkey_msg: SADB_REGISTER message 2 for ESP
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | 02 07 00 03 02 00 00 00 02 00 00 00 e1 2f 00 00
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | pfkey_get: SADB_REGISTER message 2
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | alg_init():memset(0x809a820, 0, 128) memset(0x809a8a0, 0, 2048)
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: sadb_msg_len=13 sadb_supported_len=40
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add():satype=3, exttype=14, alg_id=3
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add(): assign *0x809a838=*0xbfffea88
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[0], exttype=14, satype=3, alg_id=3, alg_ivlen=0, alg_minbits=160, alg_maxbits=160, res=0, ret=1
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add():satype=3, exttype=14, alg_id=2
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add(): assign *0x809a830=*0xbfffea90
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[1], exttype=14, satype=3, alg_id=2, alg_ivlen=0, alg_minbits=128, alg_maxbits=128, res=0, ret=1
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add():satype=3, exttype=14, alg_id=3
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add(): assign *0x809a838=*0xbfffea98
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[2], exttype=14, satype=3, alg_id=3, alg_ivlen=0, alg_minbits=160, alg_maxbits=160, res=0, ret=1
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add():satype=3, exttype=14, alg_id=2
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add(): assign *0x809a830=*0xbfffeaa0
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[3], exttype=14, satype=3, alg_id=2, alg_ivlen=0, alg_minbits=128, alg_maxbits=128, res=0, ret=1
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: sadb_msg_len=13 sadb_supported_len=48
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add():satype=3, exttype=15, alg_id=253
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add(): assign *0x809b088=*0xbfffeab0
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[4], exttype=15, satype=3, alg_id=253, alg_ivlen=128, alg_minbits=96, alg_maxbits=128, res=0, ret=1
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add():satype=3, exttype=15, alg_id=7
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add(): assign *0x809a8d8=*0xbfffeab8
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[5], exttype=15, satype=3, alg_id=7, alg_ivlen=64, alg_minbits=96, alg_maxbits=128, res=0, ret=1
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add():satype=3, exttype=15, alg_id=12
Sep 5 10:16:46 adsl-2Sep 5 10:16:50 adsl-203-15-140-27 ipsec__plutorun: 003 no public interfaces found
Sep 5 10:16:50 adsl-203-15-140-27 ipsec__plutorun: 022 "MM_1": we have no ipsecN interface for either end of this connection
Sep 5 10:16:50 adsl-203-15-140-27 ipsec__plutorun: ...could not route conn "MM_1"
03-15-140-27 Pluto[12257]: | kernel_alg_add(): assign *0x809a900=*0xbfffeac0
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[6], exttype=15, satype=3, alg_id=12, alg_ivlen=128, alg_minbits=128, alg_maxbits=128, res=0, ret=1
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add():satype=3, exttype=15, alg_id=3
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add(): assign *0x809a8b8=*0xbfffeac8
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[7], exttype=15, satype=3, alg_id=3, alg_ivlen=64, alg_minbits=168, alg_maxbits=168, res=0, ret=1
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add():satype=3, exttype=15, alg_id=3
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_add(): assign *0x809a8b8=*0xbfffead0
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | kernel_alg_register_pfkey(): SADB_SATYPE_ESP: alg[8], exttype=15, satype=3, alg_id=3, alg_ivlen=64, alSep 5 10:16:51 adsl-203-15-140-27 ipsec__plutorun: 022 "MM_1": we have no ipsecN interface for either end of this connection
Sep 5 10:16:51 adsl-203-15-140-27 ipsec__plutorun: ...could not start conn "MM_1"
g_minbits=168, alg_maxbits=168, res=0, ret=1
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | ESP registered with kernel.
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | finish_pfkey_msg: SADB_REGISTER message 3 for IPCOMP
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | 02 07 00 0a 02 00 00 00 03 00 00 00 e1 2f 00 00
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | pfkey_get: SADB_REGISTER message 3
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | IPCOMP registered with kernel.
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | finish_pfkey_msg: SADB_REGISTER message 4 for IPIP
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | 02 07 00 09 02 00 00 00 04 00 00 00 e1 2f 00 00
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | pfkey_get: SADB_REGISTER message 4
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | IPIP registered with kernel.
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: Changing to directory '/etc/ipsec.d/cacerts'
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: Warning: empty directory
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: Changing to directory '/etc/ipsec.d/crls'
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: Warning: empty directory
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: could not open my X.509 cert file '/etc/x509cert.der'
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: OpenPGP certificate file '/etc/pgpcert.pgp' not found
Sep 5 10:16:46 adsl-203-15-140-27 Pluto[12257]: | next event EVENT_SHUNT_SCAN in 120 seconds
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: |
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | *received whack message
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | from whack: got --esp=3des
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | alg_info_create_from_str() ealg_buf=3des aalg_buf=eklen=0 aklen=0
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | enum_search_prefix() calling enum_search(0x80823e4, "ESP_3DES")
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | parser_alg_info_add() esp_ealg_getbyname("3des")=3
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | __alg_info_esp_add() ealg=3 aalg=1 cnt=1
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | __alg_info_esp_add() ealg=3 aalg=2 cnt=2
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | esp string values: 3/000-1/000, 3/000-2/000,
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | alg_info_addref() alg_info->ref_cnt=1
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: added connection description "MM_1"
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | 192.168.2.0/24===203.15.140.27[@adsl-203-15-140-27.arach.net.au]---172.31.30.52...203.153.227.210[@micromine-gw.amnet.net.au]===203.11.69.0/24
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; policy: RSASIG+ENCRYPT+COMPRESS+TUNNEL+PFS+DISABLEARRIVALCHECK
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | next event EVENT_SHUNT_SCAN in 117 seconds
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: |
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | *received whack message
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | next event EVENT_SHUNT_SCAN in 117 seconds
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: |
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | *received whack message
Sep 5 10:16:49 adsl-203-15-140-27 Pluto[12257]: | next event EVENT_SHUNT_SCAN in 117 seconds
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: |
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: | *received whack message
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: listening for IKE messages
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: | found lo with address 127.0.0.1
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: | found eth0 with address 192.168.2.1
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: | found ppp0 with address 203.15.140.27
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: | IP interface ppp0 203.15.140.27 has no matching ipsec* interface -- ignored
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: | IP interface eth0 192.168.2.1 has no matching ipsec* interface -- ignored
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: | IP interface lo 127.0.0.1 has no matching ipsec* interface -- ignored
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: | could not open /proc/net/if_inet6
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: no public interfaces found
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: loading secrets from "/etc/ipsec.secrets"
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: | next event EVENT_SHUNT_SCAN in 116 seconds
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: |
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: | *received whack message
Sep 5 10:16:50 adsl-203-15-140-27 Pluto[12257]: | next event EVENT_SHUNT_SCAN in 116 seconds
Sep 5 10:16:51 adsl-203-15-140-27 Pluto[12257]: |
Sep 5 10:16:51 adsl-203-15-140-27 Pluto[12257]: | *received whack message
Sep 5 10:16:51 adsl-203-15-140-27 Pluto[12257]: "MM_1": we have no ipsecN interface for either end of this connection
Sep 5 10:16:51 adsl-203-15-140-27 Pluto[12257]: | next event EVENT_SHUNT_SCAN in 115 seconds
Sep 5 10:18:46 adsl-203-15-140-27 Pluto[12257]: |
Sep 5 10:18:46 adsl-203-15-140-27 Pluto[12257]: | *time to handle event
Sep 5 10:18:46 adsl-203-15-140-27 Pluto[12257]: | event after this is EVENT_REINIT_SECRET in 3480 seconds
Sep 5 10:18:46 adsl-203-15-140-27 Pluto[12257]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
Sep 5 10:18:46 adsl-203-15-140-27 Pluto[12257]: | next event EVENT_SHUNT_SCAN in 120 seconds
Why can't it find any public interface ?
My public interface is a PPPoE connection with a static IP. (aDSL)
Could someone tell me why this is happening ? I've read all the instructions without any joy.
This thread was automatically locked due to age.