Hi Zhiheng, > I am also seeing this UDP_ENCAP error in 5.0.1rc1 on my Red Hat Enterprise > Linux 5.6 machine. > I did not see it in the 5.0.0 release, so looks like this error is new in 5.0.1 and is happening not only on the FreeBSD: > Sep 27 11:44:53 sit-iwf charon: 00[DMN] Starting IKE charon daemon > (strongSwan 5.0.1rc1, Linux 2.6.18-238.el5, x86_64) > Sep 27 11:44:53 sit-iwf charon: 00[KNL] unable to set UDP_ENCAP: Protocol not > available > Sep 27 11:44:53 sit-iwf charon: 00[NET] enabling UDP decapsulation failed
Yes, absolutely. Older Linux kernel did not support UDP en-/decap for IPv6 either, so you will see that error there too. But as mentioned already it is not really a problem if you don't need that feature for IPv6 (which older strongSwan releases did not support anyway, they just didn't produce an error). It's simply that 5.0.1 will now try to enable it for both address families and that will fail if not supported by the kernel, but with the mentioned patch you should get a nicer error message that lists the address family and the port, which should help you decide if you can ignore it or not. Regards, Tobias _______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users
