* [LARTC] File exists?
@ 2007-03-05 20:45 Michael P. Soulier
2007-03-07 14:01 ` Jorge Evangelista
0 siblings, 1 reply; 2+ messages in thread
From: Michael P. Soulier @ 2007-03-05 20:45 UTC (permalink / raw)
To: lartc
Hello,
I'm trying to put 3 nodes in a vpn in tunnel mode.
When I run setkey on the following file, I end up with
The result of line 33: File exists.
That error isn't overly helpful, so I was hoping that someone could explain
the issue.
Here's the file, with line 33 highlighted.
Help appreciated.
Mike
# Flush the SAD and SPD
flush;
spdflush;
# Add SA for 10.33.15.145 to 10.31.8.96 in tunnel mode
add 10.33.15.145 10.31.8.96 esp 0x201 -m tunnel -E 3des-cbc
0xB1A03D22D78D6357084B13E930A27F72ECAFB61B5D398A22
-A hmac-md5 0x2F9FCE98685ED329C2E9A5C6CC7C5E20;
# Add SA for 10.31.8.96 to 10.33.15.145 in tunnel mode
add 10.31.8.96 10.33.15.145 esp 0x301 -m tunnel -E 3des-cbc
0x80C16F148B2C11A0E65939D9D945C5630BE09B7F2EC75186
-A hmac-md5 0xFC2B609F54DFFA62040AC8D9A4657387;
# Add SA for 10.33.15.145 to 10.33.15.151 in tunnel mode
add 10.33.15.145 10.33.15.151 esp 0x201 -m tunnel -E 3des-cbc
0xB1A03D22D78D6357084B13E930A27F72ECAFB61B5D398A22
-A hmac-md5 0x2F9FCE98685ED329C2E9A5C6CC7C5E20;
# Add SA for 10.33.15.151 to 10.33.15.145 in tunnel mode
add 10.33.15.151 10.33.15.145 esp 0x301 -m tunnel -E 3des-cbc
0xE0C9C70351CD3B4E2D9024FC1CACBC8B0D288E6981417259
-A hmac-md5 0x8FC64D13209EFC7732D4A9A1159BA758; <==== line 33
# Add policy for 172.16.113.0/24 -> 192.168.19.0/24 over
# the 10.33.15.145-10.31.8.96 tunnel
spdadd 172.16.113.0/24 192.168.19.0/24 any -P out ipsec
esp/tunnel/10.33.15.145-10.31.8.96/require;
# Add policy for 192.168.19.0/24 -> 172.16.113.0/24 over
# the 10.31.8.96-10.33.15.145 tunnel
spdadd 192.168.19.0/24 172.16.113.0/24 any -P in ipsec
esp/tunnel/10.31.8.96-10.33.15.145/require;
# Add policy for 172.16.113.0/24 -> 172.16.129.0/24 over
# the 10.33.15.145-10.33.15.151 tunnel
spdadd 172.16.113.0/24 172.16.129.0/24 any -P out ipsec
esp/tunnel/10.33.15.145-10.33.15.151/require;
# Add policy for 172.16.129.0/24 -> 172.16.113.0/24 over
# the 10.33.15.151-10.33.15.145 tunnel
spdadd 172.16.129.0/24 172.16.113.0/24 any -P in ipsec
esp/tunnel/10.33.15.151-10.33.15.145/require;
--
Michael P. Soulier <michael_soulier@mitel.com>, 613-592-2122 x2522
"Any intelligent fool can make things bigger and more complex... It takes a
touch of genius - and a lot of courage to move in the opposite direction."
--Albert Einstein
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
^ permalink raw reply [flat|nested] 2+ messages in thread* Re: [LARTC] File exists?
2007-03-05 20:45 [LARTC] File exists? Michael P. Soulier
@ 2007-03-07 14:01 ` Jorge Evangelista
0 siblings, 0 replies; 2+ messages in thread
From: Jorge Evangelista @ 2007-03-07 14:01 UTC (permalink / raw)
To: lartc
Hi,
I had had the same problem, I remember that I solve the problem kill
the process, because when you run setkey then you can not run again
setkey until that you kill the running process, try to find ID (ps
waux) and then kill -9.
On 3/5/07, Michael P. Soulier <michael_soulier@mitel.com> wrote:
> Hello,
>
> I'm trying to put 3 nodes in a vpn in tunnel mode.
>
> When I run setkey on the following file, I end up with
>
> The result of line 33: File exists.
>
> That error isn't overly helpful, so I was hoping that someone could explain
> the issue.
>
> Here's the file, with line 33 highlighted.
>
> Help appreciated.
>
> Mike
>
> # Flush the SAD and SPD
> flush;
> spdflush;
>
> # Add SA for 10.33.15.145 to 10.31.8.96 in tunnel mode
> add 10.33.15.145 10.31.8.96 esp 0x201 -m tunnel -E 3des-cbc
> 0xB1A03D22D78D6357084B13E930A27F72ECAFB61B5D398A22
> -A hmac-md5 0x2F9FCE98685ED329C2E9A5C6CC7C5E20;
> # Add SA for 10.31.8.96 to 10.33.15.145 in tunnel mode
> add 10.31.8.96 10.33.15.145 esp 0x301 -m tunnel -E 3des-cbc
> 0x80C16F148B2C11A0E65939D9D945C5630BE09B7F2EC75186
> -A hmac-md5 0xFC2B609F54DFFA62040AC8D9A4657387;
>
> # Add SA for 10.33.15.145 to 10.33.15.151 in tunnel mode
> add 10.33.15.145 10.33.15.151 esp 0x201 -m tunnel -E 3des-cbc
> 0xB1A03D22D78D6357084B13E930A27F72ECAFB61B5D398A22
> -A hmac-md5 0x2F9FCE98685ED329C2E9A5C6CC7C5E20;
> # Add SA for 10.33.15.151 to 10.33.15.145 in tunnel mode
> add 10.33.15.151 10.33.15.145 esp 0x301 -m tunnel -E 3des-cbc
> 0xE0C9C70351CD3B4E2D9024FC1CACBC8B0D288E6981417259
> -A hmac-md5 0x8FC64D13209EFC7732D4A9A1159BA758; <==== line 33
>
>
> # Add policy for 172.16.113.0/24 -> 192.168.19.0/24 over
> # the 10.33.15.145-10.31.8.96 tunnel
> spdadd 172.16.113.0/24 192.168.19.0/24 any -P out ipsec
> esp/tunnel/10.33.15.145-10.31.8.96/require;
>
> # Add policy for 192.168.19.0/24 -> 172.16.113.0/24 over
> # the 10.31.8.96-10.33.15.145 tunnel
> spdadd 192.168.19.0/24 172.16.113.0/24 any -P in ipsec
> esp/tunnel/10.31.8.96-10.33.15.145/require;
>
> # Add policy for 172.16.113.0/24 -> 172.16.129.0/24 over
> # the 10.33.15.145-10.33.15.151 tunnel
> spdadd 172.16.113.0/24 172.16.129.0/24 any -P out ipsec
> esp/tunnel/10.33.15.145-10.33.15.151/require;
>
> # Add policy for 172.16.129.0/24 -> 172.16.113.0/24 over
> # the 10.33.15.151-10.33.15.145 tunnel
> spdadd 172.16.129.0/24 172.16.113.0/24 any -P in ipsec
> esp/tunnel/10.33.15.151-10.33.15.145/require;
>
> --
> Michael P. Soulier <michael_soulier@mitel.com>, 613-592-2122 x2522
> "Any intelligent fool can make things bigger and more complex... It takes a
> touch of genius - and a lot of courage to move in the opposite direction."
> --Albert Einstein
> _______________________________________________
> LARTC mailing list
> LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
>
--
"The network is the computer"
_______________________________________________
LARTC mailing list
LARTC@mailman.ds9a.nl
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2007-03-07 14:01 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2007-03-05 20:45 [LARTC] File exists? Michael P. Soulier
2007-03-07 14:01 ` Jorge Evangelista
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.