Support for openswan in 2.6.32.9

[Kenton1]

Hi All,
I'm trying to install openswan with Kernel 2.6.32.9. initially i was using 2.4.12. I managed to get IPSEC SA established (using windows L2TP/IPSEC client) however wasn't able to get xl2tpd going.
I have now tried to install openswan 2.6.25 but ipsec is not running correctly
ipsec verify is failing here:
Pluto listening for IKE on udp 500                              [FAILED]
  Cannot execute command "lsof -i UDP:500": No such file or directory
Pluto listening for NAT-T on udp 4500                           [FAILED]
  Cannot execute command "lsof -i UDP:4500": No such file or directory

Should 2.6.32.9 be able to support openswan ?

Thanks,
Mike

[cbxbiker61]

Your error messages mean that "lsof" (list open files) is not installed.  You should install it.

[FrankL]

same problem on my kirkwood device. 'Fixed' by blacklisting mv_cesa module in /etc/modprobe.d/blacklist

Seems to be a bug in mv_cesa with ipsec in type=transport mode?! I hope this gets resolved, as hw crypto acceleration is really nice on kirkwood for dmcrypt/cryptsetup.

by the way, xl2tpd performs really abysmally on my arm boxes! (haven't tried on x86). Is this a common problem for xl2tpd? openl2tpd has much better performance, but is not the end-all as it has its own, different, issues.

[FrankL]

seems to be fixed in kernel 2.6.36