LinuxForum.Fans
Тема

после запуска пакета openswan - так и должно быть?

Автор: Imperator 3 сообщений 1167 просмотров
#321064

здравствуйте.
Вы мне ответили как установить пакеты - за это очень благодарен.

пока поставил пакет openswan, настроил вроде, после запуска пишет вот это:

linux-6vhu:~ # ipsec setup start
redirecting to systemctl start
ipsec_setup: Starting Openswan IPsec 2.6.38...
ipsec_setup: No KLIPS support found while requested, desperately falling back to netkey
ipsec_setup: NETKEY support found. Use protostack=netkey in /etc/ipsec.conf to avoid attempts to use KLIPS. Attempting to continue with NETKEY

является ли это нормальной работой или что за ошибка это netkey?

спасибо.

#321065

linux-6vhu:~ # ipsec verify
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path [OK]
Linux Openswan U2.6.38/K(no kernel code presently loaded)
Checking for IPsec support in kernel [FAILED]
SAref kernel support [N/A]
Checking that pluto is running [FAILED]
whack: Pluto is not running (no "/var/run/pluto/pluto.ctl")
Checking for 'ip' command [OK]
Checking /bin/sh is not /bin/dash [OK]
Checking for 'iptables' command [OK]
Opportunistic Encryption Support [DISABLED]


linux-6vhu:~ # ipsec version
Linux Openswan U2.6.38/K(no kernel code presently loaded)
See `ipsec --copyright' for copyright information.

#321066

после выполнения
linux-6vhu:~ # modprobe af_key


linux-6vhu:~ # ipsec verify
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path [OK]
Linux Openswan U2.6.38/K3.7.10-1.1-desktop (netkey)
Checking for IPsec support in kernel [OK]
SAref kernel support [N/A]
NETKEY: Testing XFRM related proc values [OK]
[FAILED]

Please disable /proc/sys/net/ipv4/conf/*/accept_redirects
or NETKEY will accept bogus ICMP redirects!

[OK]
Checking that pluto is running [FAILED]
whack: Pluto is not running (no "/var/run/pluto/pluto.ctl")
Checking for 'ip' command [OK]
Checking /bin/sh is not /bin/dash [OK]
Checking for 'iptables' command [OK]
Opportunistic Encryption Support [DISABLED]
can not load config '/etc/ipsec.conf': /etc/ipsec.conf:36: syntax error, unexpected INCLUDE [include]


как отменить эту команду?

Войдите или зарегистрируйтесь, чтобы ответить.