-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Hello Martin,
Yes, that is caused by specifying "-esn" in the esp line. The same line without "-esn" works just fine. I have ipcomp working just fine. That is quite weird then. I'll boot the newest kernel then and see if it works then. Mit freundlichen Grüßen/Regards, Noel Kuntze GPG Key ID: 0x63EC6658 Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658 Am 17.12.2014 um 10:14 schrieb Martin Willi: > Noel, > >> I just tried to use esn (extended sequence numbers), but the responder got >> that error: >> >> parsed CREATE_CHILD_SA request 2 [ N(IPCOMP_SUP) SA No KE TSi TSr ] >> received netlink error: No such file or directory (2) >> unable to add SAD entry with SPI cb1c9923 > > Can you confirm that this error is related to the use of ESN, and not > the use of IPComp? Have you tried to disable IPcomp? If it works > without, you are probably lacking IPComp support or the used compression > algorithm. > >> On what kernel feature does esn depend? Is there an extra module for it? > > ESN support was introduced with Linux 2.6.39, so unless your kernel has > a regression it should support it. ESN support at least on my kernel is > no option or module, and is always included in XFRM. > > Regards > Martin > -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJUkeBRAAoJEDg5KY9j7GZYKJgQAJ/vXQMMyQyf79RFPCpi9BlS nJYzMAMohukPRgiJ4u3PrnRiV+H+LF/lBvZMdePoSb/FlGxb55jajUWJ1Z0q06cq B5lXI9id/3xkOXvkynON6cpCZOAplO/vIBQbj833jMJeA7rpZhWXHHMJ5BO+1I33 xSr1qREv/nCVEFL7PvOHtzBhYHDREUGwffR1bsqDYhSHKAD7em/mgJrX3/0GkSJE epy4OLjOv/Gr61BFbYuldbOT/PMrw+rlrmT5xEEVzOKAUAY7FfJAABp+s4Wkrg8t 6+zEOMUjiDlUdNaJlUK6lbP2HjWkf7p9bG+OxGsp6ryoQXI8Cx8PtIGry7qzjqpw F0a2hJ6GCZs+C6VZlDq8ELp54J1HJyWv5SNloYtSa8A9ZELwvgMIEZnwneZ7RDxr D6p7J3PM0CkrtUPVDKplcclS2SLnWzadYN0P36/lRFNchy1Vfgq6QEsiuRx/35Ay suGd3jY0BEjvmftOv8RC7HGcja7xFSdcymQrSWKr49eK4gNkPOh3Y5Yrt9dTVi1d euqJEd+L+kc225ozoASms/clHFoMg2tk244v7/dmMFTa+Hf8jWOJz3OqrkhMni1/ D5Xl9NW8K2wSTrQMgKNmlHicgfM4xImMP00fpKskJjICBCIpERAVcebwOLIfRcy1 GQcO2t7iuZxck21UaPnB =nfNn -----END PGP SIGNATURE----- _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
