redhat as4 Openswan 連接 cisco 7206 不成功
在redhat as4 下安裝Openswan ,和cisco 7206之間建立IPSEC VPN
請高手們幫忙檢查一下是哪有錯誤!
linux上是編譯安裝的Openswan
DEBUG信息如下:
# less messages
Feb 25 16:39:18 localhost ipsec_setup: ...Openswan IPsec stopped
Feb 25 16:39:18 localhost ipsec_setup: Stopping Openswan IPsec...
Feb 25 16:39:18 localhost kernel: padlock: VIA PadLock not detected.
Feb 25 16:39:18 localhost modprobe: FATAL: Error inserting padlock_aes (/lib/modules/2.6.19.7/kernel/drivers/crypto/padlock-ae
s.ko): No such device
Feb 25 16:39:18 localhost kernel: padlock: VIA PadLock Hash Engine not detected.
Feb 25 16:39:18 localhost modprobe: FATAL: Error inserting padlock_sha (/lib/modules/2.6.19.7/kernel/drivers/crypto/padlock-sh
a.ko): No such device
Feb 25 16:39:18 localhost kernel: padlock: VIA PadLock Hash Engine not detected.
Feb 25 16:39:18 localhost modprobe: FATAL: Error inserting padlock_sha (/lib/modules/2.6.19.7/kernel/drivers/crypto/padlock-sh
a.ko): No such device
Feb 25 16:39:18 localhost kernel: padlock: No VIA PadLock drivers have been loaded.
Feb 25 16:39:19 localhost ipsec_setup: NETKEY on eth0 10.167.27.105/255.255.254.0 broadcast 10.167.27.255
Feb 25 16:39:19 localhost ipsec_setup: ...Openswan IPsec started
Feb 25 16:39:19 localhost ipsec_setup: Starting Openswan IPsec U2.4.12/K2.6.19.7...
Feb 25 16:39:19 localhost ipsec__plutorun: 003 ERROR "/etc/ipsec.secrets" line 1: index ":PSK" illegal leading `:' in IPv6 num
eric address
Feb 25 16:39:19 localhost ipsec__plutorun: 003 ERROR "/etc/ipsec.secrets" line 1: index ""123456"" illegal (non-DNS-name) char
acter in name
Feb 25 16:39:19 localhost ipsec__plutorun: 003 "/etc/ipsec.secrets" line 1: unexpected end of id list
Feb 25 16:39:19 localhost ipsec__plutorun: 104 "test" #1: STATE_MAIN_I1: initiate
Feb 25 16:39:19 localhost ipsec__plutorun: ...could not start conn "test"
Feb 25 17:00:05 localhost smartd: Device: /dev/hdc, 1 Currently unreadable (pending) sectors
Feb 25 17:00:05 localhost smartd: Device: /dev/hdc, 2 Offline uncorrectable sectors
# service ipsec restart
ipsec_setup: Stopping Openswan IPsec...
ipsec_setup: Starting Openswan IPsec U2.4.12/K2.6.19.7...
#
#
#
# ifconfig
eth0 Link encap:Ethernet HWaddr 00:16:76:33:61:3A
inet addr:10.167.27.105 Bcast:10.167.27.255 Mask:255.255.254.0
inet6 addr: fe80::216:76ff:fe33:613a/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:38985 errors:0 dropped:0 overruns:0 frame:0
TX packets:18233 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:8063200 (7.6 MiB) TX bytes:2963887 (2.8 MiB)
lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:106 errors:0 dropped:0 overruns:0 frame:0
TX packets:106 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:13033 (12.7 KiB) TX bytes:13033 (12.7 KiB)
# ipsec look
localhost.localdomain Mon Feb 25 15:27:13 HKT 2008
Destination Gateway Genmask Flags MSS Window irtt Iface
0.0.0.0 10.167.26.1 0.0.0.0 UG 0 0 0 eth0
10.167.26.0 0.0.0.0 255.255.254.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
192.168.0.0 10.167.26.1 255.255.255.0 UG 0 0 0 eth0
# ipsec verify
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path
Linux Openswan U2.4.12/K2.6.19.7 (netkey)
Checking for IPsec support in kernel
NETKEY detected, testing for disabled ICMP send_redirects
Please disable /proc/sys/net/ipv4/conf/*/send_redirects
or NETKEY will cause the sending of bogus ICMP redirects!
NETKEY detected, testing for disabled ICMP accept_redirects
Please disable /proc/sys/net/ipv4/conf/*/accept_redirects
or NETKEY will accept bogus ICMP redirects!
Checking for RSA private key (/etc/ipsec.secrets)
ipsec showhostkey: no default key in "/etc/ipsec.secrets"
Checking that pluto is running
Two or more interfaces found, checking IP forwarding
Checking NAT and MASQUERADEing
Checking for 'ip' command
Checking for 'iptables' command
Opportunistic Encryption Support
# ipsec auto --status
000 interface lo/lo ::1
000 interface lo/lo 127.0.0.1
000 interface lo/lo 127.0.0.1
000 interface eth0/eth0 10.167.27.105
000 interface eth0/eth0 10.167.27.105
000 %myid = (none)
000 debug none
000
000 algorithm ESP encrypt: id=2, name=ESP_DES, ivlen=8, keysizemin=64, keysizemax=64
000 algorithm ESP encrypt: id=3, name=ESP_3DES, ivlen=8, keysizemin=192, keysizemax=192
000 algorithm ESP encrypt: id=7, name=ESP_BLOWFISH, ivlen=8, keysizemin=40, keysizemax=448
000 algorithm ESP encrypt: id=11, name=ESP_NULL, ivlen=0, keysizemin=0, keysizemax=0
000 algorithm ESP encrypt: id=12, name=ESP_AES, ivlen=8, keysizemin=128, keysizemax=256
000 algorithm ESP encrypt: id=252, name=ESP_SERPENT, ivlen=8, keysizemin=128, keysizemax=256
000 algorithm ESP encrypt: id=253, name=ESP_TWOFISH, ivlen=8, keysizemin=128, keysizemax=256
000 algorithm ESP auth attr: id=1, name=AUTH_ALGORITHM_HMAC_MD5, keysizemin=128, keysizemax=128
000 algorithm ESP auth attr: id=2, name=AUTH_ALGORITHM_HMAC_SHA1, keysizemin=160, keysizemax=160
000 algorithm ESP auth attr: id=5, name=AUTH_ALGORITHM_HMAC_SHA2_256, keysizemin=256, keysizemax=256
000 algorithm ESP auth attr: id=251, name=(null), keysizemin=0, keysizemax=0
000
000 algorithm IKE encrypt: id=5, name=OAKLEY_3DES_CBC, blocksize=8, keydeflen=192
000 algorithm IKE encrypt: id=7, name=OAKLEY_AES_CBC, blocksize=16, keydeflen=128
000 algorithm IKE hash: id=1, name=OAKLEY_MD5, hashsize=16
000 algorithm IKE hash: id=2, name=OAKLEY_SHA1, hashsize=20
000 algorithm IKE dh group: id=2, name=OAKLEY_GROUP_MODP1024, bits=1024
000 algorithm IKE dh group: id=5, name=OAKLEY_GROUP_MODP1536, bits=1536
000 algorithm IKE dh group: id=14, name=OAKLEY_GROUP_MODP2048, bits=2048
000 algorithm IKE dh group: id=15, name=OAKLEY_GROUP_MODP3072, bits=3072
000 algorithm IKE dh group: id=16, name=OAKLEY_GROUP_MODP4096, bits=4096
000 algorithm IKE dh group: id=17, name=OAKLEY_GROUP_MODP6144, bits=6144
000 algorithm IKE dh group: id=18, name=OAKLEY_GROUP_MODP8192, bits=8192
000
000 stats db_ops.c: {curr_cnt, total_cnt, maxsz} :context={0,1,36} trans={0,1,336} attrs={0,1,224}
000
000 "test": 10.167.26.0/23===10.167.27.105---10.167.26.1...10.167.26.1---192.168.0.2===192.168.0.0/24; prospective erouted; eroute owner: #0
000 "test": srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
000 "test": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "test": policy: PSK+ENCRYPT+TUNNEL+UP; prio: 24,23; interface: eth0; encap: esp;
000 "test": newest ISAKMP SA: #0; newest IPsec SA: #0;
000 "test": ESP algorithms wanted: 3DES(3)_000-MD5(1); flags=strict
000 "test": ESP algorithms loaded: 3DES(3)_000-MD5(1); flags=strict
000
000 #1: "test":500 STATE_MAIN_I1 (sent MI1, expecting MR1); EVENT_RETRANSMIT in 17s; nodpd
000 #1: pending Phase 2 for "test" replacing #0
000
# cat /etc/ipsec.conf
# /etc/ipsec.conf - Openswan IPsec configuration file
# RCSID $Id: ipsec.conf.in,v 1.15.2.6 2006-10-19 03:49:46 paul Exp $
# This file: /usr/local/share/doc/openswan/ipsec.conf-sample
#
# Manual: ipsec.conf.5
version 2.0 # conforms to second version of ipsec.conf specification
# basic configuration
config setup
# plutodebug / klipsdebug = "all", "none" or a combation from below:
# "raw crypt parsing emitting control klips pfkey natt x509 private"
# eg: plutodebug="control parsing"
#
# ONLY enable plutodebug=all or klipsdebug=all if you are a developer !!
#
# NAT-TRAVERSAL support, see README.NAT-Traversal
nat_traversal=yes
# virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12
#
# enable this if you see "failed to find any available worker"
nhelpers=0
# Add connections here
# sample VPN connections, see /etc/ipsec.d/examples/
conn test
authby= secret
#RRT
left= 192.168.0.2
leftsubnet= 192.168.0.0/24
leftnexthop= %defaultroute
#SAA
right= 10.167.27.105
rightsubnet= 10.167.26.0/23
rightnexthop= %defaultroute
esp= 3des-md5
keyexchange= ike
pfs= no
auto= start
#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf
# cat /etc/ipsec.secrets
192.168.0.2 10.167.27.105 :PSK "123456"
# cat /etc/redhat-release
Red Hat Enterprise Linux AS release 4 (Nahant Update 4)
# uname -a
Linux localhost.localdomain 2.6.19.7 #1 SMP Fri Feb 22 17:19:24 HKT 2008 i686 i686 i386 GNU/Linux
《解決方案》
有沒有人會啊? 請版主幫忙啊!
《解決方案》
錯誤日誌:
# modprobe ipsec
FATAL: Error inserting ipsec (/lib/modules/2.6.19.7/kernel/net/ipsec/ipsec.ko): Operation not permitted
#
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: Oops: 0000 [#1]
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: SMP
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: CPU: 0
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: EIP: 0060:[<f90191eb>] Not tainted VLI
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: EFLAGS: 00010286 (2.6.19.7 #1)
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: EIP is at 0xf90191eb
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: eax: f75f3c00 ebx: f75f3c00 ecx: 00000058 edx: f90191eb
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: esi: 00000058 edi: ea8f0000 ebp: ffffffea esp: c5c9cf18
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: ds: 007b es: 007b ss: 0068
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: Process udev (pid: 23652, ti=c5c9c000 task=c1adb570 task.ti=c5 c9c000)
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: Stack: c02c0d28 f7131140 c1adb570 00000010 00000000 ea8f0000 0 0000000 f75f3ef8
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: c040744c c02494e5 c5ca5fc0 e8fed5b8 c0196fb9 00000000 c 0414858 c5ca5fc0
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: f7131140 00001000 08093250 c01970aa 00001000 00001000 f 7131140 c037d4a0
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: Call Trace:
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: [<c02c0d28>] netstat_show+0x67/0x98
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: [<c02494e5>] class_device_attr_show+0x14/0x1b
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: [<c0196fb9>] fill_read_buffer+0x53/0x7e
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: [<c01970aa>] sysfs_read_file+0x43/0x73
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: [<c015ec16>] vfs_read+0xb1/0x160
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: [<c015ef67>] sys_read+0x41/0x67
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: [<c01034d9>] sysenter_past_esp+0x56/0x79
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: =======================
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: Code: Bad EIP value.
Message from syslogd@localhost at Tue Feb 26 09:32:18 2008 ...
localhost kernel: EIP: [<f90191eb>] 0xf90191eb SS:ESP 0068:c5c9cf18
# lsmod
Module Size Used by
twofish 11520 0
twofish_common 35968 1 twofish
serpent 22528 0
blowfish 12928 0
crypto_null 6912 0
aes 33088 0
sha256 13824 0
sch_htb 20480 1
parport_pc 30788 1
lp 16840 0
parport 39368 2 parport_pc,lp
autofs4 25092 0
sunrpc 155708 1
dm_mirror 27216 0
dm_mod 60696 1 dm_mirror
button 11152 0
battery 14468 0
asus_acpi 20376 0
ac 9604 0
uhci_hcd 27404 0
ehci_hcd 34568 0
i2c_i801 12044 0
i2c_core 25472 1 i2c_i801
snd_intel8x0 36380 0
snd_ac97_codec 92064 1 snd_intel8x0
snd_ac97_bus 6784 1 snd_ac97_codec
snd_pcm_oss 45856 0
snd_mixer_oss 20224 1 snd_pcm_oss
snd_pcm 79364 3 snd_intel8x0,snd_ac97_codec,snd_pcm_oss
snd_timer 26756 1 snd_pcm
snd 54628 6 snd_intel8x0,snd_ac97_codec,snd_pcm_oss,snd_mixer_oss,snd_pcm,snd_timer
soundcore 12256 1 snd
snd_page_alloc 14344 2 snd_intel8x0,snd_pcm
8139too 30592 0
e100 38152 0
mii 9728 2 8139too,e100
floppy 61668 0
ext3 130312 2
jbd 60840 1 ext3
sd_mod 24320 0
scsi_mod 136620 1 sd_mod
# service ipsec stop
ipsec_setup: Stopping Openswan IPsec...
ipsec_setup: stop ordered, but IPsec appear to be stopped already!
ipsec_setup: doing cleanup anyway...
# service ipsec start
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: Oops: 0000 [#2]
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: SMP
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: CPU: 0
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: EFLAGS: 00010286 (2.6.19.7 #1)
kernel: EIP: 0060:[<c018e47b>] Not tainted VLI
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: EIP is at proc_get_inode+0x5c/0x136
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: eax: 00000000 ebx: f00003bf ecx: f6f543c0 edx: f905f580
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: esi: f6f543c0 edi: f7f69800 ebp: ec40fa88 esp: ea05dcf0
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: ds: 007b es: 007b ss: 0068
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: Process ipsec (pid: 23761, ti=ea05d000 task=f7fee570 task.ti=ea05d000)
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: Stack: 00000000 fffffff4 f7fee570 ec40fa88 f00003bf f6f543c0 c6473358 c01912a9
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: ffffffea c03f4b80 c6473358 ec40fa88 ec40fb04 c016506a ea05df04 ea05dd94
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: 00000000 57b32ee9 ec40fa88 ea05df04 c01652d2 f7f700c0 ea05dd8c ea05dd94
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: Call Trace:
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c01912a9>] proc_lookup+0x9f/0xb3
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c016506a>] real_lookup+0x53/0xc7
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c01652d2>] do_lookup+0x57/0xa2
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c0165a6c>] __link_path_walk+0x74f/0xb62
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c018e3e2>] proc_alloc_inode+0x3c/0x54
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c016f2d2>] alloc_inode+0xde/0x161
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c0165ec2>] link_path_walk+0x43/0xae
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c014f3e4>] __handle_mm_fault+0x1a6/0x2cd
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c0165c9c>] __link_path_walk+0x97f/0xb62
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c0165ec2>] link_path_walk+0x43/0xae
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c014f3e4>] __handle_mm_fault+0x1a6/0x2cd
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c016623e>] do_path_lookup+0x18b/0x1ef
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c01664d1>] __user_walk_fd+0x2d/0x3e
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c016171b>] vfs_stat_fd+0x19/0x40
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c014f3e4>] __handle_mm_fault+0x1a6/0x2cd
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c0161d48>] sys_stat64+0xf/0x23
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c01d7ae0>] copy_to_user+0x4b/0x53
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c01286b7>] sys_rt_sigprocmask+0xb3/0xc6
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c01034d9>] sysenter_past_esp+0x56/0x79
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: [<c037007b>] packet_getsockopt+0x95/0xba
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: =======================
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: Code: 04 0c d6 39 c0 c7 04 24 70 13 39 c0 e8 18 fc f8 ff e8 6c 5e f7 ff 85 f6 74 26 8b 56 2c 85 d2 74 1f 89 e0 25 00 f0 ff ff 8b 40 10 <83> 3a 02 0f 84 c1 00 00 00 c1 e0 07 8d 04 02 ff 80 80 01 00 00
Message from syslogd@localhost at Tue Feb 26 09:33:13 2008 ...
localhost kernel: EIP: [<c018e47b>] proc_get_inode+0x5c/0x136 SS:ESP 0068:ea05dcf0
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: Oops: 0000 [#3]
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: SMP
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: CPU: 1
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: EIP: 0060:[<f90191eb>] Not tainted VLI
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: EFLAGS: 00010286 (2.6.19.7 #1)
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: EIP is at 0xf90191eb
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: eax: c1bd3000 ebx: c1bd3000 ecx: c0414010 edx: f90191eb
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: esi: eb5c28c0 edi: c1bd3000 ebp: 000003d9 esp: e765aeec
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: ds: 007b es: 007b ss: 0068
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: Process ifconfig (pid: 23842, ti=e765a000 task=f7e8dab0 task.ti=e765a000)
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: Stack: c02b7aa3 eb5c28c0 c03c2a22 f7638000 00000000 00000000 00000000 00000000
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: 00000000 00000000 00000000 00000000 c0414010 eb5c28c0 c02b7b6d c017569d
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: Call Trace:
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: [<c02b7aa3>] dev_seq_printf_stats+0x18/0xcc
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: [<c02b7b6d>] dev_seq_show+0x16/0x19
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: [<c017569d>] seq_read+0x18a/0x251
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: [<c015ec16>] vfs_read+0xb1/0x160
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: [<c015ef67>] sys_read+0x41/0x67
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: [<c01034d9>] sysenter_past_esp+0x56/0x79
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: [<c037007b>] packet_getsockopt+0x95/0xba
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: =======================
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: Code: Bad EIP value.
Message from syslogd@localhost at Tue Feb 26 09:33:47 2008 ...
localhost kernel: EIP: [<f90191eb>] 0xf90191eb SS:ESP 0068:e765aeec
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: Oops: 0000 [#4]
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: SMP
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: CPU: 1
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: EIP: 0060:[<f90191eb>] Not tainted VLI
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: EFLAGS: 00010286 (2.6.19.7 #1)
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: EIP is at 0xf90191eb
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: eax: c1bd3000 ebx: c1bd3000 ecx: c0414010 edx: f90191eb
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: esi: c57df840 edi: c1bd3000 ebp: 000003d9 esp: e7b66eec
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: ds: 007b es: 007b ss: 0068
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: Process ifconfig (pid: 23867, ti=e7b66000 task=f6c50030 task.ti=e7b66000)
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: Stack: c02b7aa3 c57df840 c03c2a22 f7638000 00000000 00000000 00000000 00000000
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: 00000000 00000000 00000000 00000000 c0414010 c57df840 c02b7b6d c017569d
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: Call Trace:
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: [<c02b7aa3>] dev_seq_printf_stats+0x18/0xcc
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: [<c02b7b6d>] dev_seq_show+0x16/0x19
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: [<c017569d>] seq_read+0x18a/0x251
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: [<c015ec16>] vfs_read+0xb1/0x160
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: [<c015ef67>] sys_read+0x41/0x67
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: [<c01034d9>] sysenter_past_esp+0x56/0x79
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: [<c037007b>] packet_getsockopt+0x95/0xba
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: =======================
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: Code: Bad EIP value.
Message from syslogd@localhost at Tue Feb 26 09:33:52 2008 ...
localhost kernel: EIP: [<f90191eb>] 0xf90191eb SS:ESP 0068:e7b66eec
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: Oops: 0000 [#5]
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: SMP
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: CPU: 1
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: EIP: 0060:[<f90191eb>] Not tainted VLI
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: EFLAGS: 00010286 (2.6.19.7 #1)
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: EIP is at 0xf90191eb
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: eax: c1bd3000 ebx: c1bd3000 ecx: c0414010 edx: f90191eb
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: esi: f71ab5c0 edi: c1bd3000 ebp: 000003d9 esp: e765aeec
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: ds: 007b es: 007b ss: 0068
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: Process ifconfig (pid: 23892, ti=e765a000 task=f7e1cab0 task.ti=e765a000)
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: Stack: c02b7aa3 f71ab5c0 c03c2a22 f7638000 00000000 00000000 00000000 00000000
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: 00000000 00000000 00000000 00000000 00000000 00000000 00000000 00000000
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: 00000000 00000000 00000000 00000000 c0414010 f71ab5c0 c02b7b6d c017569d
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: Call Trace:
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: [<c02b7aa3>] dev_seq_printf_stats+0x18/0xcc
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: [<c02b7b6d>] dev_seq_show+0x16/0x19
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: [<c017569d>] seq_read+0x18a/0x251
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: [<c015ec16>] vfs_read+0xb1/0x160
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: [<c015ef67>] sys_read+0x41/0x67
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: [<c01034d9>] sysenter_past_esp+0x56/0x79
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: [<c037007b>] packet_getsockopt+0x95/0xba
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: =======================
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: Code: Bad EIP value.
Message from syslogd@localhost at Tue Feb 26 09:34:01 2008 ...
localhost kernel: EIP: [<f90191eb>] 0xf90191eb SS:ESP 0068:e765aeec
《解決方案》
我也在做這個問題,openswan和cisco的伺服器能實現VPN連接嗎?
《解決方案》
同問這個問題
《解決方案》
明顯是secret寫錯了嘛
192.168.0.2 10.167.27.105: PSK "123456"
《解決方案》
感覺你的openswan都沒有安裝好吧～
《解決方案》
他們的機制都不一樣，跟路由根本就不能連
《解決方案》
呵呵，不熟悉這類VPN
《解決方案》
只要是用IPSEC協議,linux與路由器是可以連接的.可能是你的路由器上配置不對.比如在路由器上打開通道的PFS功能試一下(前提是你的linux系統上openswan要安裝配置好,ipsec介面要起來)
