spi1-console.txt

ipsec vpn

Starting UML /mara4/openswan-2/nightly/UMLPOOL/west/start.sh
spawn /mara4/openswan-2/nightly/UMLPOOL/west/start.sh single
Checking for the skas3 patch in the host...found
Checking for /proc/mm...found
Linux version 2.4.19-47um ([e-mail]) (gcc version 2.95.4 20011002 (Debian prerelease)) #1 Thu Apr 15 21:57:39 EDT 2004
On node 0 totalpages: 8192
zone(0): 8192 pages.
zone(1): 0 pages.
zone(2): 0 pages.
Kernel command line: root=/dev/root rootfstype=hostfs rootflags=/mara4/openswan-2/nightly/UMLPOOL/west/root rw umid=west eth0=daemon,10:00:00:ab:cd:ff,unix,/tmp/uml6rnxbQ.d/private/ctl,/tmp/uml6rnxbQ.d/private/data eth1=daemon,10:00:00:64:64:45,unix,/tmp/uml6rnxbQ.d/public/ctl,/tmp/uml6rnxbQ.d/public/data eth2=daemon,10:00:00:32:64:45,unix,/tmp/uml6rnxbQ.d/admin/ctl,/tmp/uml6rnxbQ.d/admin/data single
Calibrating delay loop... 647.53 BogoMIPS
Memory: 29240k available
Dentry cache hash table entries: 4096 (order: 3, 32768 bytes)
Inode cache hash table entries: 2048 (order: 2, 16384 bytes)
Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
Checking for host processor cmov support...Yes
Checking for host processor xmm support...No
Checking that ptrace can change system call numbers...OK
Checking that host ptys support output SIGIO...Yes
Checking that host ptys support SIGIO on close...No, enabling workaround
POSIX conformance testing by UNIFIX
Linux NET4.0 for Linux 2.4
Based upon Swansea University Computer Society NET3.039
Initializing RT netlink socket
Starting kswapd
VFS: Diskquotas version dquot_6.4.0 initialized
devfs: v1.12a (20020514) Richard Gooch ([e-mail])
devfs: boot_options: 0x1
pty: 256 Unix98 ptys configured
SLIP: version 0.8.4-NET3.019-NEWTTY (dynamic channels, max=256).
RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
loop: loaded (max 8 devices)
PPP generic driver version 2.4.2
Universal TUN/TAP device driver 1.5 (C)1999-2002 Maxim Krasnyansky
blkmtd: error, missing `device' name
Initializing software serial port version 1
daemon_setup : Ignoring data socket specification
Netdevice 0 (10:00:00:ab:cd:ff) : daemon backend (uml_switch version 3) - unix:/tmp/uml6rnxbQ.d/private/ctl
daemon_setup : Ignoring data socket specification
Netdevice 1 (10:00:00:64:64:45) : daemon backend (uml_switch version 3) - unix:/tmp/uml6rnxbQ.d/public/ctl
daemon_setup : Ignoring data socket specification
Netdevice 2 (10:00:00:32:64:45) : daemon backend (uml_switch version 3) - unix:/tmp/uml6rnxbQ.d/admin/ctl
mconsole (version 2) initialized on /mara2/mcr/.uml/west/mconsole
unable to open root_fs for validation
Initializing stdio console driver
NET4: Linux TCP/IP 1.0 for NET4.0
IP Protocols: ICMP, UDP, TCP
IP: routing cache hash table of 512 buckets, 4Kbytes
TCP: Hash tables configured (established 2048 bind 2048)
IPv4 over IPv4 tunneling driver
GRE over IPv4 tunneling driver
klips_info:ipsec_init: KLIPS startup, Openswan KLIPS IPsec stack version: cvs2004Feb14_18:29:44
klips_info:ipsec_alg_init: KLIPS alg v=0.8.1-0 (EALG_MAX=255, AALG_MAX=251)
klips_info:ipsec_alg_init: calling ipsec_alg_static_init()
ipsec_aes_init(alg_type=15 alg_id=12 name=aes): ret=0
ipsec_aes_init(alg_type=14 alg_id=9 name=aes_mac): ret=0
ip_conntrack (228 buckets, 1824 max)
ip_tables: (C) 2000-2002 Netfilter core team
arp_tables: (C) 2002 David S. Miller
NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
VFS: Mounted root (hostfs filesystem).
Mounted devfs on /dev

INIT: version 2.78 booting
Activating swap...
Calculating module dependencies... depmod: Can't open /lib/modules/2.4.19-47um/modules.dep for writing
done.
Loading modules: cat: /etc/modules: No such file or directory

modprobe: Can't open dependencies file /lib/modules/2.4.19-47um/modules.dep (No such file or directory)
Checking all file systems...
Parallelizing fsck version 1.18 (11-Nov-1999)
Setting kernel variables.
Mounting local filesystems...
/dev/shm on /tmp type tmpfs (rw)
/dev/shm on /var/run type tmpfs (rw)
devpts on /dev/pts type devpts (rw,mode=0622)
none on /usr/share type hostfs (ro)
none on /testing type hostfs (ro,/mara4/openswan-2/nightly/testing)
none on /usr/src type hostfs (ro,/mara4/openswan-2/nightly)
Enabling packet forwarding: done.
Configuring network interfaces: done.
Cleaning: /tmp /var/lock /var/run.
Initializing random number generator... done.
Recovering nvi editor sessions... done.
Give root password for maintenance
(or type Control-D for normal startup): 
west:~# echo Starting loading module
Starting loading module
west:~# exec bash --noediting
west:~# echo Finished loading module
Finished loading module
west:~# klogd -c 4 -x -f /tmp/klog.log
west:~# ipsec spi --clear
west:~# ipsec eroute --clear
west:~# enckey=0x4043434545464649494a4a4c4c4f4f515152525454575758
west:~# ipsec spi --af inet --edst 192.1.2.45 --spi 0x12345678 --proto esp --src 192.1.2.23 --esp 3des-md5-96 --enckey $enckey --authkey 0x87658765876587658765876587658765
west:~# ipsec spi --af inet --edst 192.1.2.45 --spi 0x12345678 --proto tun --src 192.1.2.23 --dst 192.1.2.45 --ip4
west:~# ipsec spigrp inet 192.1.2.45 0x12345678 tun inet 192.1.2.45 0x12345678 esp 
west:~# ipsec eroute --add --eraf inet --src 192.0.2.0/24 --dst 192.0.1.0/24 --said tun0x12345678@192.1.2.45
west:~# ipsec tncfg --attach --virtual ipsec0 --physical eth1
west:~# ifconfig ipsec0 inet 192.1.2.45 netmask 0xffffff00 broadcast 192.1.2.255 up
west:~# ipsec look
west Fri Apr 16 15:52:53 GMT 2004
192.0.2.0/24       -> 192.0.1.0/24       => tun0x12345678@192.1.2.45 esp0x12345678@192.1.2.45  (0)
ipsec0->eth1 mtu=16260(1500)->1500
esp0x12345678@192.1.2.45 ESP_3DES_HMAC_MD5: dir=in  src=192.1.2.23 iv_bits=64bits iv=0x1e8664b701784814 alen=128 aklen=128 eklen=192 life(c,s,h)= refcount=4 ref=2
tun0x12345678@192.1.2.45 IPIP: dir=in  src=192.1.2.23 life(c,s,h)= refcount=4 ref=3
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
west:~# route add -host 192.0.2.1 gw 192.1.2.23 dev ipsec0
west:~# ipsec setup stop
IPSEC EVENT: KLIPS device ipsec0 shut down.
ipsec_setup: Stopping Openswan IPsec...
ipsec_setup: stop ordered, but IPsec does not appear to be running!
ipsec_setup: doing cleanup anyway...
west:~# kill `cat /var/run/klogd.pid`; cat /tmp/klog.log
klogd 1.3-3#33.1, log source = /proc/kmsg started.
<4>Linux version 2.4.19-47um ([e-mail]) (gcc version 2.95.4 20011002 (Debian prerelease)) #1 Thu Apr 15 21:57:39 EDT 2004
<4>On node 0 totalpages: 8192
<4>zone(0): 8192 pages.
<4>zone(1): 0 pages.
<4>zone(2): 0 pages.
<4>Kernel command line: root=/dev/root rootfstype=hostfs rootflags=/mara4/openswan-2/nightly/UMLPOOL/west/root rw umid=west eth0=daemon,10:00:00:ab:cd:ff,unix,/tmp/uml6rnxbQ.d/private/ctl,/tmp/uml6rnxbQ.d/private/data eth1=daemon,10:00:00:64:64:45,unix,/tmp/uml6rnxbQ.d/public/ctl,/tmp/uml6rnxbQ.d/public/data eth2=daemon,10:00:00:32:64:45,unix,/tmp/uml6rnxbQ.d/admin/ctl,/tmp/uml6rnxbQ.d/admin/data single
<4>Calibrating delay loop... 647.53 BogoMIPS
<6>Memory: 29240k available
<6>Dentry cache hash table entries: 4096 (order: 3, 32768 bytes)
<6>Inode cache hash table entries: 2048 (order: 2, 16384 bytes)
<4>Mount-cache hash table entries: 512 (order: 0, 4096 bytes)
<4>Buffer-cache hash table entries: 1024 (order: 0, 4096 bytes)
<4>Page-cache hash table entries: 8192 (order: 3, 32768 bytes)
<4>Checking for host processor cmov support...Yes
<4>Checking for host processor xmm support...No
<4>Checking that ptrace can change system call numbers...OK
<4>Checking that host ptys support output SIGIO...Yes
<4>Checking that host ptys support SIGIO on close...No, enabling workaround
<4>POSIX conformance testing by UNIFIX
<6>Linux NET4.0 for Linux 2.4
<6>Based upon Swansea University Computer Society NET3.039
<4>Initializing RT netlink socket
<4>Starting kswapd
<5>VFS: Diskquotas version dquot_6.4.0 initialized
<6>devfs: v1.12a (20020514) Richard Gooch ([e-mail])
<6>devfs: boot_options: 0x1
<4>pty: 256 Unix98 ptys configured
<6>SLIP: version 0.8.4-NET3.019-NEWTTY (dynamic channels, max=256).
<4>RAMDISK driver initialized: 16 RAM disks of 4096K size 1024 blocksize
<6>loop: loaded (max 8 devices)
<6>PPP generic driver version 2.4.2
<6>Universal TUN/TAP device driver 1.5 (C)1999-2002 Maxim Krasnyansky
<4>blkmtd: error, missing `device' name
<6>Initializing software serial port version 1
<4>daemon_setup : Ignoring data socket specification
<6>Netdevice 0 (10:00:00:ab:cd:ff) : daemon backend (uml_switch version 3) - unix:/tmp/uml6rnxbQ.d/private/ctl
<4>daemon_setup : Ignoring data socket specification
<6>Netdevice 1 (10:00:00:64:64:45) : daemon backend (uml_switch version 3) - unix:/tmp/uml6rnxbQ.d/public/ctl
<4>daemon_setup : Ignoring data socket specification
<6>Netdevice 2 (10:00:00:32:64:45) : daemon backend (uml_switch version 3) - unix:/tmp/uml6rnxbQ.d/admin/ctl
<4>mconsole (version 2) initialized on /mara2/mcr/.uml/west/mconsole
<3>unable to open root_fs for validation
<6>Initializing stdio console driver
<6>NET4: Linux TCP/IP 1.0 for NET4.0
<6>IP Protocols: ICMP, UDP, TCP
<6>IP: routing cache hash table of 512 buckets, 4Kbytes
<6>TCP: Hash tables configured (established 2048 bind 2048)
<6>IPv4 over IPv4 tunneling driver
<6>GRE over IPv4 tunneling driver
<6>klips_info:ipsec_init: KLIPS startup, Openswan KLIPS IPsec stack version: cvs2004Feb14_18:29:44
<6>klips_info:ipsec_alg_init: KLIPS alg v=0.8.1-0 (EALG_MAX=255, AALG_MAX=251)
<6>klips_info:ipsec_alg_init: calling ipsec_alg_static_init()
<4>ipsec_aes_init(alg_type=15 alg_id=12 name=aes): ret=0
<4>ipsec_aes_init(alg_type=14 alg_id=9 name=aes_mac): ret=0
<4>ip_conntrack (228 buckets, 1824 max)
<4>ip_tables: (C) 2000-2002 Netfilter core team
<4>arp_tables: (C) 2002 David S. Miller
<6>NET4: Unix domain sockets 1.0/SMP for Linux NET4.0.
<4>VFS: Mounted root (hostfs filesystem).
<6>Mounted devfs on /dev
<7>Something isn't implemented in here
<7>Something isn't implemented in here
<7>Something isn't implemented in here
<7>Something isn't implemented in here
<7>Something isn't implemented in here
<7>Something isn't implemented in here
<4>
<2>IPSEC EVENT: KLIPS device ipsec0 shut down.
<4>
Kernel logging (proc) stopped.
Kernel log daemon terminating.
west:~# halt -p -f
Power down.