Hi, Please can you add output of: ip route show ip route show table 220 ip xfrm state ip a
Are you able to successfully do: ip route add 10.180.0.0/24 via 172.16.48.17 ? Miroslav On Saturday, April 25, 2015 at 6:24:45 PM UTC+2, Bas van Dijk wrote: > > Hello, > > I recently changed something in my network setup (I added an IP > address to eth0) and now charon can't add the route to the rightsubnet > (10.180.0.0/24) anymore. This is the relevant log output from the KNL > subsystem: > > getting a local address in traffic selector 172.16.48.16/28 > using host 172.16.48.17 > using 136.243.17.1 as nexthop to reach 213.163.70.4/32 > 136.243.25.108 is on interface eth0 > installing route: 10.180.0.0/24 via 136.243.17.1 src 172.16.48.17 dev > eth0 > getting iface index for eth0 > received netlink error: Network is unreachable (101) > > If I try to do add the route manually I get the same error: > > # ip route add 10.180.0.0/24 via 136.243.17.1 src 172.16.48.17 dev eth0 > RTNETLINK answers: Network is unreachable > > I don't completely understand the error message. What network is > unreachable? > > Regards, > > Bas > > > On 21 March 2015 at 12:21, Bas van Dijk <[email protected]> wrote: > > Hi Tobias, > > > > I added the address to `eth0` and now strongswan inserts the proper > > route. So I think I'm all set! > > > > Thanks for your insightful help, > > > > Bas > > > > On 20 March 2015 at 18:54, Tobias Brunner <[email protected]> > wrote: > >> Hi Bas, > >> > >>> My question now is to which interface should I attach 172.16.48.17? > >> > >> It doesn't really matter. If you don't actually suffer from #197 [1], > >> i.e. if you use strongSwan 5.0.1 or newer, you can add it to `lo`. > >> Adding it to eth0 does work too, that's what strongSwan does by default > >> when it installs virtual IPs it gets assigned dynamically from other > >> peers [2]. Routers on the Internet won't route packets with that > >> destination address to your host so it doesn't make much of a > difference > >> if you install it on an interface connected to it or not. > >> > >> Regards, > >> Tobias > >> > >> [1] https://wiki.strongswan.org/issues/197 > >> [2] https://wiki.strongswan.org/projects/strongswan/wiki/VirtualIp > >> > _______________________________________________ > Users mailing list > [email protected] > https://lists.strongswan.org/mailman/listinfo/users >
_______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
