Hello Dewayne -

>> 21[KNL] adding PF_ROUTE route failed: Invalid argument
>> 21[KNL] installing route failed: 192.68.1.1/32 via (null) src %any dev vtnet1
> 
> Clemens,
> I only use FreeBSD 9.2Stable and Strongswan 5.1.1 performs nicely. 
> After setting knl=4 in charon debug, I received this:
> 
> # grep -i route /var/log/auth.log |tail -n1
> Feb 20 06:17:24 admin2 charon: 11[KNL] installing route: 10.130.30.17/32
> via 172.16.200.6 src 10.16.200.47 dev vga1
> 
> which seems to be what you're after.

Yep, this is exactly what I had expected - instead, I get:

21[KNL] adding PF_ROUTE route failed: Invalid argument
21[KNL] installing route failed: 192.68.1.1/32 via (null) src %any dev vtnet1

where the "(null)" and "%any" parts seem very odd to me!


> So the issue doesn't appear to reside with strongswan?

Ok. Maybe the PF_ROUTE interface changed in FreeBSD 10 - let me look into 
that...


> There are two tricks with using enc0 - firstly it must be enabled
> (ifconfig enc0 up)

Darn! I forgot to "re-up" it after the last reboot. Thanks for reminding me!
(I had used it with Raccoon a while ago but had rebooted since ...)


> and there are some tricks to getting it to reveal
> exactly what you're after, the "man 4 enc" is quite helpful.

Yep, those I know.

Thanks -

        Clemens


Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to