forum.lissyara.su

Добавлено: **2012-02-13 8:38:48**

Всем привет.

Подскажите, почему я вижу это в логах:)))
X.X.X.X - это локальный iP
при этом нормально работают еще 10 gif+ipsec

Код: Выделить всё

Feb 13 04:40:48 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/0e5d564d/50
Feb 13 04:40:50 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/0d3dd000/50
Feb 13 04:40:53 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/097a521f/50
Feb 13 04:40:56 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/04e86b23/50
Feb 13 04:40:56 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/097a521f/50
Feb 13 04:40:58 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/097a521f/50
Feb 13 04:40:59 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/097a521f/50
Feb 13 04:41:00 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/097a521f/50
Feb 13 04:41:04 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/057980a0/50
Feb 13 04:41:05 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/097a521f/50
Feb 13 04:41:10 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/057980a0/50
Feb 13 04:41:13 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/097a521f/50
Feb 13 04:46:23 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/00b086ae/50
Feb 13 04:51:32 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/034c3d8f/50
Feb 13 04:51:41 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/034c3d8f/50
Feb 13 04:56:52 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/01809dd0/50
Feb 13 05:01:58 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/0c600dc1/50
Feb 13 05:03:47 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/0a4408ea/50
Feb 13 05:07:10 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/0a06a60f/50
Feb 13 05:12:29 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/04748b12/50
Feb 13 05:17:34 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/03638927/50
Feb 13 05:22:47 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/04af90f1/50
Feb 13 05:28:01 gate-s1 kernel: ipsec_common_input: no key association found for SA X.X.X.X/035180e7/50

Добавлено: **2012-02-15 0:30:12**

setkey -Da

Посмотри нет ли там совпадающих политик с той что пытается создаться?
У меня есть такой же баг но он проявляется только для клиентов из под ната, да и то не часто, помогает дроп всех SA (setkey -DF)

Добавлено: **2012-02-16 10:38:18**

не помогло

Добавлено: **2012-02-16 12:09:47**

Я ошибся, там должно быть setkey -aF

forum.lissyara.su

IPSEC

IPSEC

Re: IPSEC

Re: IPSEC

Re: IPSEC