On Mon, May 23, 2011 at 11:44 PM, Andreas Steffen
<[email protected]> wrote:
> Hello Andreas,
>
> debugging these many connections might be easier using the
> condensed /var/log/auth.log which has the following entries:
>
> http://www.strongswan.org/uml/testresults45/ikev2/dpd-restart/carol.auth.log

the auth.log was still huge on taylor.

i attempted to start from a clean slate today and did this on all
machines in the test bed:

        /etc/init.d/ipsec stop
        rm -f /var/run/charon.pid /var/run/starter.pid /var/run/charon.ctl
        /etc/init.d/ipsec stop
       logrotate -f /etc/logrotate.conf
        ip xfrm policy flush
        /etc/network/if-up.d/ssh-outside-ipsec  # this adds xfrm policy for
port 500UDP and ssh traffic to NOT go through ipsec
        /etc/init.d/ipsec start

and again taylor got immediate problems with the three hosts, just
like yesterday. We dont have additional firewall rules that limit
traffic between these hosts. Other hosts in the ash.spotify.net domain
dont have problems either.
Can something else get confused?
is there more state somewhere?

_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to