IPSEC Script error

ggzengel

dsl.rad-az.de is wrong parsed as dsl.rad


Jun 27 16:27:50 check_reload_status: Syncing firewall
Jun 27 16:27:50 check_reload_status: Reloading filter
Jun 27 16:27:50 php: /vpn_ipsec.php: The command '/usr/local/sbin/setkey -f /tmp/spd.conf.reload.1372350470.79i0Di 2>&1' returned exit code '1', the output was 'libipsec: invalid IP address while parsing "dsl.rad" line 1: hostname nor servname provided, or not known at [ out ipsec esp/tunnel/46.165.174.98-dsl.rad-az.de/unique] parse failed, line 1.'
Jun 27 16:27:50 php: /vpn_ipsec.php: Removing SPDs from tunnel gw 'dsl.rad-az.de'. Local Subnet '192.168.192.0/24' and Remote Subnet '10.19.12.0/24'. Reloading policy

ggzengel

Isn't this a error?

The command '/usr/local/sbin/setkey -f /tmp/spd.conf.reload.1372350470.79i0Di 2>&1' returned exit code '1'

jimp

It looks like racoon's setkey doesn't parse that hostname right due to the "-" in the domain, setkey uses "-" as a special separator. There may not be anything we can do for that, but we may have to check on that.

Do you just have that hostname in as the remote gateway, or do you have it as the identifier also?

ggzengel

For identifier I use "rad-az".