search

hwdsl2 / setup-ipsec-vpn

Scripts to build your own IPsec VPN server, with IPsec/L2TP, Cisco IPsec and IKEv2
Other
25.29k stars 6.32k forks source link

whack: Pluto is not running (no "/run/pluto/pluto.ctl") #293

Closed hugo158 closed 6 years ago

hugo158 commented 6 years ago

whack: Pluto is not running (no "/run/pluto/pluto.ctl")

rp_filter is not fully aware of IPsec and should be disabled Checking that pluto is running [FAILED] Checking 'ip' command [OK] Checking 'iptables' command [OK] Checking 'prelink' command does not interfere with FIPS [OK] Checking for obsolete ipsec.conf options [OK]

hwdsl2 commented 6 years ago

@hugo158 Hello! There is not enough information in your issue report. If the issue persists feel free to open a new one with more details. Thanks!

alanwei43 commented 5 years ago

@hugo158 Hello! There is not enough information in your issue report. If the issue persists feel free to open a new one with more details. Thanks!

# docker logs ipsec-vpn-server

Trying to auto discover IP of this server...

================================================

IPsec VPN server is now ready for use!

Connect to your new VPN with these details:

Server IP: 47.52.157.46
IPsec PSK: your_ipsec_pre_shared_key
Username: your_vpn_username
Password: your_vpn_password

Write these down. You'll need them to connect!

Important notes:   https://git.io/vpnnotes2
Setup VPN clients: https://git.io/vpnclients

================================================

modprobe: ERROR: could not insert 'af_key': Exec format error
FAILURE in loading NETKEY/XFRM stack
Redirecting to: /etc/init.d/ipsec start
FAILURE in loading NETKEY/XFRM stack
Starting pluto IKE daemon for IPsec: Initializing NSS database

.....
xl2tpd[1]: Not looking for kernel SAref support.
xl2tpd[1]: Using l2tp kernel support.
xl2tpd[1]: xl2tpd version xl2tpd-1.3.12 started on 3bf1d0fdeba1 PID:1
xl2tpd[1]: Written by Mark Spencer, Copyright (C) 1998, Adtran, Inc.
xl2tpd[1]: Forked by Scott Balmos and David Stipp, (C) 2001
xl2tpd[1]: Inherited by Jeff McAdams, (C) 2002
xl2tpd[1]: Forked again by Xelerance (www.xelerance.com) (C) 2006-2016
xl2tpd[1]: Listening on IP address 0.0.0.0, port 1701
hwdsl2 commented 5 years ago

@Allen-Wei Run modprobe af_key on your Docker host and then delete and re-create the Docker container. See: https://github.com/hwdsl2/docker-ipsec-vpn-server#start-the-ipsec-vpn-server

alanwei43 commented 5 years ago

@Allen-Wei Run modprobe af_key on your Docker host and then delete and re-create the Docker container. See: https://github.com/hwdsl2/docker-ipsec-vpn-server#start-the-ipsec-vpn-server

thanks

letoams commented 5 years ago

Once libreswan 3.28 is released, you will no longer need af_key. The same applies to strongswan’s next version.

Sent from mobile device

On May 9, 2019, at 05:44, Alan Wei notifications@github.com wrote:

@Allen-Wei Run modprobe af_key on your Docker host and then delete and re-create the Docker container. See: https://github.com/hwdsl2/docker-ipsec-vpn-server#start-the-ipsec-vpn-server

thanks

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub, or mute the thread.