Pb connexion VPN

[PacMan06]

Bonjour, <BR> <BR>J'ai un petit probleme pour etablir la connexion VPN entre mes 2 sites. En effet, tout fonctionne au niveau decoreco et recovpn le tout en automatique. La connexion VPN a fonctionné 1 fois deja entre les 2 serveurs, mais depuis que j'ai regle mes pbs de reconnexion automatique ( voir post precedent), voici ce que j'obtiens lorsque je visualise un log IPSEC : <BR> <BR>cote gauche : IPCOP 1.3 en 192.168.0.0/24 GREEN 192.168.3.0/24 ORANGE et PPOE RED avec dyndns (MAJ dyndns ok ) <BR> <BR>cote droit : IPCOP 1.3 en 192.100.100.0/24 GREEN et PPOE RED avec dyndns (MAJ dyndns ok ) <BR> <BR>Les 2 IPCOP ont les memes config que ce soit au niveau VPN qu'au niveau du crontab ( meme serveur ntp et memes horaires de debut de script decoreco et recovpn ) <BR> <BR>sur le cote gauche apres une decoreco.sh et un recovpn.sh par crontab voici ce que j'obtiens dans le log IPSEC : <BR> <BR>14:31:01 ipsec_setup Stopping FreeS/WAN IPsec... <BR>14:31:02 ipsec_setup ...FreeS/WAN IPsec stopped <BR>14:32:00 ipsec_setup Stopping FreeS/WAN IPsec... <BR>14:32:00 ipsec_setup stop ordered, but IPsec does not appear to be running! <BR>14:32:00 ipsec_setup doing cleanup anyway... <BR>14:32:00 ipsec_setup: /usr/local/lib/ipsec/eroute: Trouble openning PF_KEY family socket with error KLIPS not loaded or enabled. <BR>14:32:00 ipsec_setup: /usr/local/lib/ipsec/spi: Trouble openning PF_KEY family socket with error KLIPS not loaded or enabled. <BR>14:32:00 ipsec_setup ...FreeS/WAN IPsec stopped <BR>14:32:00 ipsec_setup Starting FreeS/WAN IPsec super-freeswan-1.99_kb2c... <BR>14:32:00 ipsec_setup Using /lib/modules/2.4.20/kernel/net/ipsec/ipsec.o <BR>14:32:00 ipsec_setup KLIPS debug `none' <BR>14:32:00 ipsec_setup KLIPS ipsec0 on ppp0 81.53.76.83/255.255.255.255 pointopoint 193.253.160.3 <BR>14:32:00 ipsec_setup ...FreeS/WAN IPsec started <BR>14:32:01 ipsec__plutorun: 022 "test" we have no ipsecN interface for either end of this connection <BR>14:32:01 ipsec__plutorun ...could not route conn "test" <BR>14:32:01 ipsec__plutorun: 022 "test" we have no ipsecN interface for either end of this connection <BR>14:32:01 ipsec__plutorun ...could not start conn "test" <BR> <BR> <BR> <BR>et voici la meme chose sur le cote droit : <BR> <BR>14:30:11 ipsec__plutorun: 104 "test" #1: STATE_MAIN_I1 initiate <BR>14:30:11 ipsec__plutorun: 010 "test" #1: STATE_MAIN_I1 retransmission; will wait 20s for response <BR>14:30:11 ipsec__plutorun: 010 "test" #1: STATE_MAIN_I1 retransmission; will wait 40s for response <BR>14:30:11 ipsec__plutorun: 031 "test" #1 max number of retransmissions (20) reached STATE_MAIN_I1. No acceptable response to our first IKE message <BR>14:30:11 ipsec__plutorun: 000 "test" #1 starting keying attempt 2 of an unlimited number, but releasing whack <BR>14:30:11 ipsec__plutorun ...could not start conn "test" <BR>14:31:00 ipsec_setup Stopping FreeS/WAN IPsec... <BR>14:31:01 ipsec_setup ...FreeS/WAN IPsec stopped <BR>14:32:01 ipsec_setup Stopping FreeS/WAN IPsec... <BR>14:32:01 ipsec_setup stop ordered, but IPsec does not appear to be running! <BR>14:32:01 ipsec_setup doing cleanup anyway... <BR>14:32:01 ipsec_setup: /usr/local/lib/ipsec/eroute: Trouble openning PF_KEY family socket with error KLIPS not loaded or enabled. <BR>14:32:01 ipsec_setup: /usr/local/lib/ipsec/spi: Trouble openning PF_KEY family socket with error KLIPS not loaded or enabled. <BR>14:32:01 ipsec_setup ...FreeS/WAN IPsec stopped <BR>14:32:01 ipsec_setup Starting FreeS/WAN IPsec super-freeswan-1.99_kb2c... <BR>14:32:01 ipsec_setup Using /lib/modules/2.4.20/kernel/net/ipsec/ipsec.o <BR>14:32:01 ipsec_setup KLIPS debug `none' <BR>14:32:01 ipsec_setup KLIPS ipsec0 on ppp0 81.53.76.49/255.255.255.255 pointopoint 193.253.160.3 <BR>14:32:01 ipsec_setup ...FreeS/WAN IPsec started <BR> <BR> <BR>Merci d'avance pour votre aide. <IMG SRC="images/smiles/icon_rolleyes.gif">

[elbibelo64]

Même pb aujourd'hui...en fin de compte, je pense que c'est parce que tu as modifié ton /etc/rc.d/rc.firewall ! <BR> <BR>Enlève tes modif du genre: /usr/local/sbin/ipsec setup --restart et vérifie toute la syntaxe! <BR> <BR>A+