Ipsec setkey pfkey
Hi everybody,
I'm trying to set up an IPsec connection (Tunnel mode) between two pc which are in my LAN.
I use Ubuntu 6.10, so I have recompiled the kernel adding the the security features and networking options needed, I have installed ipsec-tools, and edited the /etc/ipsec-tools.conf in this way:
# Flush the SAD and SPD
flush;
spdflush;
# ESP SAs
add 192.168.1.101 192.168.1.100 esp 0x201 -m tunnel -E 3des-cbc \
0x7aeaca3f87d060a12f4a4487d5a5c3355920fae69a96c831 \
-A hmac-md5 0xc0291ff014dccdd03874d9e8e4cdf3e6;
add 192.168.1.100 192.168.1.101 esp 0x301 -m tunnel -E 3des-cbc \
0xf6ddb555acfd9d77b03ea3843f2653255afe8eb5573965df \
-A hmac-md5 0x96358c90783bbfa3d7b196ceabe0536b;
# Security policies
spdadd 172.16.1.0/24 172.16.2.0/24 any -P out ipsec
esp/tunnel/192.168.1.101-192.168.1.100/require;
spdadd 172.16.2.0/24 172.16.1.0/24 any -P in ipsec
esp/tunnel/192.168.1.100-192.168.1.101/require;
I try with setkey -f /etc/ipsec-tools.conf
and the system answers:
pfkey_open: Operation not permitted
Does someone know why and how to fix it?
Thank you in advance...
|