Seems like the ipsec scripts rely heavily on ifconfig but that utility is not available on bering-uclibc. There are lots of modifications to make it work with the ip command. I was able to overcome this problem by replacing this line in _startklips:
eval `ip addr show $phys primary | grep inet | sed -n 1p | With this: eval `ip addr show ${phys%%:*} label $phys | grep inet | sed -n 1p | Before: Device "eth2:0" does not exist. After: inet 192.168.8.10/16 brd 192.168.8.255 scope global secondary eth2:0 If there is no ethx:xxx label, the above modification still works (eg. ip addr show eth0 label eth0). Just thought I'd mention this because I think it's important enough to change. Openswan does support aliased interfaces and it's the only way to use a secondary ip, that I know of at least. __________________________________ Do you Yahoo!? Yahoo! Small Business - Try our new resources site! http://smallbusiness.yahoo.com/resources/ ------------------------------------------------------- This SF.Net email is sponsored by: New Crystal Reports XI. Version 11 adds new functionality designed to reduce time involved in creating, integrating, and deploying reporting solutions. Free runtime info, new features, or free trial, at: http://www.businessobjects.com/devxi/728 ------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html