Hi Paul, Thanks for the reply.
The output is: [17:04:19][sol1][~]# ipsec auto --add tunnel8 WARNING: ipsec auto has been deprecated ipsec addconn: /etc/ipsec.d/con14.conf:19: warning: obsolete keyword ignored: dpdaction=clear ipsec addconn: /etc/ipsec.d/con18.conf:19: warning: obsolete keyword ignored: dpdaction=restart ipsec addconn: /etc/ipsec.d/con19.conf:19: warning: obsolete keyword ignored: dpdaction=restart ipsec addconn: /etc/ipsec.d/con2.conf:24: warning: obsolete keyword ignored: dpdaction=clear ipsec addconn: /etc/ipsec.d/con25.conf:25: warning: obsolete keyword ignored: dpdaction=hold ipsec addconn: /etc/ipsec.d/con8.conf:24: warning: obsolete keyword ignored: dpdaction=clear "tunnel8": ikev2=no has been replaced by keyexchange=ikev1 "tunnel8": warning: keyingtries=3 ignored, UP connection will attempt to establish until marked DOWN "tunnel8": added IKEv1 connection In the remote site I got the log: Oct 17 17:10:21 beelinkAntonio pluto[225880]: "tunnel1" #18: ignoring informational payload INVALID_ID_INFORMATION, msgid=00000000, length=12 Oct 17 17:10:21 beelinkAntonio pluto[225880]: "tunnel1" #18: received and ignored notification payload: INVALID_ID_INFORMATION I’ve installed version 5.0 instead of the 5.0-rc3, and I can confirm that it works, the issue appears in version 5.1. — Saludos / Regards / Cumprimentos António Silva > On 17 Oct 2024, at 15:59, Paul Wouters <[email protected]> wrote: > > On Thu, 17 Oct 2024, antonio via Swan wrote: > >> I recently update my libreswan version from 5.0~rc3 to 5.1 and without >> touching the configuration I couldn’t connect. >> The remote side is using Libreswan 5.0~rc3. >> If I downgrade to the previous version, everything is fine. >> When connecting I got the error message: >> Oct 17 10:15:01 sol1 pluto[855951]: "tunnel8"[6] 6.149.27.119 #5: cannot >> respond to IPsec SA request because no connection is known for >> 192.168.20.0/24===82.100.127.28[@xauth.mad,MS+XS+S=C]...6.149.27.119[192.168.1.60,+MC+XC+S=C]===192.168.20.2/32 >> Oct 17 10:15:01 sol1 pluto[855951]: "tunnel8"[6] 6.149.27.119 #5: sending >> encrypted notification INVALID_ID_INFORMATION to 6.149.27.119:4500 > > Seems like your connection failed to load? What is the output of: > > ipsec auto --add tunnel8 > > Paul
_______________________________________________ Swan mailing list -- [email protected] To unsubscribe send an email to [email protected]
