FreeBSD Port: strongswan-5.1.1_1

[Clemens Schrimpe]

Hello Dewayne -

>> 21[KNL] adding PF_ROUTE route failed: Invalid argument
>> 21[KNL] installing route failed: 192.68.1.1/32 via (null) src %any dev vtnet1
> 
> Clemens,
> I only use FreeBSD 9.2Stable and Strongswan 5.1.1 performs nicely. 
> After setting knl=4 in charon debug, I received this:
> 
> # grep -i route /var/log/auth.log |tail -n1
> Feb 20 06:17:24 admin2 charon: 11[KNL] installing route: 10.130.30.17/32
> via 172.16.200.6 src 10.16.200.47 dev vga1
> 
> which seems to be what you're after.

Yep, this is exactly what I had expected - instead, I get:

21[KNL] adding PF_ROUTE route failed: Invalid argument
21[KNL] installing route failed: 192.68.1.1/32 via (null) src %any dev vtnet1

where the "(null)" and "%any" parts seem very odd to me!


> So the issue doesn't appear to reside with strongswan?

Ok. Maybe the PF_ROUTE interface changed in FreeBSD 10 - let me look into that...


> There are two tricks with using enc0 - firstly it must be enabled
> (ifconfig enc0 up)

Darn! I forgot to "re-up" it after the last reboot. Thanks for reminding me!
(I had used it with Raccoon a while ago but had rebooted since ...)


> and there are some tricks to getting it to reveal
> exactly what you're after, the "man 4 enc" is quite helpful.

Yep, those I know.

Thanks -

	Clemens


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3736 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-ports/attachments/20140219/c8f2fb9f/attachment.bin>