OpenVZ Forum: Support » openVZ and Openswan IPsec

Home » General » Support » openVZ and Openswan IPsec (Problems starting ipsec)

Show: Today's Messages :: Show Polls :: Message Navigator
E-mail to friend

openVZ and Openswan IPsec [message #48689]

Wed, 31 October 2012 17:39

mtruiz81
Messages: 1
Registered: October 2012
Location: Spain

Junior Member

hi,

I am using a server with kernel version 2.6.32-042stab062.2 and I am trying to use Openswan IPsec U2.6.32/K2.6.32-042stab062.2

Configuration files for openswan are 100% OK because it works perfect with kernel 2.6.32-279.11.1.el6.x86_64.

I am getting the following error in the /var/log/messages ;

...
Oct 31 18:30:16 dl43 pluto[53077]: Using Linux 2.6 IPsec interface code on 2.6.32-042stab062.2 (experimental code)
Oct 31 18:30:16 dl43 pluto[53077]: FATAL ERROR: Failed to bind bcast socket in init_netlink() - Perhaps kernel was not compiled with CONFIG_XFRM. Errno 1: Operation not permitted

I have checked all XFRM parametes in kernel and all looks good;

CONFIG_XFRM=y
CONFIG_XFRM_USER=y
CONFIG_XFRM_SUB_POLICY=y
CONFIG_XFRM_MIGRATE=y
CONFIG_XFRM_STATISTICS=y
CONFIG_XFRM_IPCOMP=m
CONFIG_INET=y
CONFIG_INET_AH=m
CONFIG_INET_ESP=m
CONFIG_INET_IPCOMP=m
CONFIG_INET_XFRM_TUNNEL=m
CONFIG_INET_TUNNEL=m
CONFIG_INET_XFRM_MODE_TRANSPORT=m
CONFIG_INET_XFRM_MODE_TUNNEL=m
CONFIG_INET_XFRM_MODE_BEET=m
CONFIG_INET_LRO=y
CONFIG_INET_DIAG=m
CONFIG_INET_TCP_DIAG=m
CONFIG_INET6_AH=m
CONFIG_INET6_ESP=m
CONFIG_INET6_IPCOMP=m
CONFIG_INET6_XFRM_TUNNEL=m
CONFIG_INET6_TUNNEL=m
CONFIG_INET6_XFRM_MODE_TRANSPORT=m
CONFIG_INET6_XFRM_MODE_TUNNEL=m
CONFIG_INET6_XFRM_MODE_BEET=m
CONFIG_INET6_XFRM_MODE_ROUTEOPTIMIZATION=m
CONFIG_INET_DCCP_DIAG=m

I would appreciate any help on this matter.

Thanks in advance!

BR

Report message to a moderator