[openstack-dev] [VPNaas]How to load kernel module with IPSec?
pc at michali.net
Mon Jun 29 13:13:56 UTC 2015
Ah, so Icehouse... From what I recall, there were two problems running RHEL
type operating systems with *Swan. First, they use LibSwan instead of
OpenSwan. Second, there were some config/setup problems with StrongSwan
Recently, there were some commits to resolve these issues. For the kernel
issue that you have, see commit 72e1f670, which creates a LibSwan driver
and deals with the kernel module loading. You may need to backport that
fix to run VPN under CentOS.
Paul Michali (pc_m)
On Mon, Jun 29, 2015 at 8:26 AM Zhi Chang <changzhi at unitedstack.com> wrote:
> Hi, thanks for you reply.
> My OS is CentOS 6.5 and doing an OpenStack install, and my OpenStack
> verison is I.
> Zhi Chang
> ------------------ Original ------------------
> *From: * "Paul Michali"<pc at michali.net>;
> *Date: * Mon, Jun 29, 2015 06:37 PM
> *To: * "OpenStack Development Mailing List (not for usage questions)"<
> openstack-dev at lists.openstack.org>;
> *Subject: * Re: [openstack-dev] [VPNaas]How to load kernel module with
> Curious as to what operating system you are using and which release?
> Are you running under DevStack or doing an OpenStack install?
> Paul Michali (pc_m)
> On Mon, Jun 29, 2015 at 6:31 AM Zhi Chang <changzhi at unitedstack.com>
>> Hi, all
>> I have some questions about how to load kernel module of IPSec. I'm
>> using Openswan to build VPNaas and there is a error message says "no kernel
>> code presently loaded" when I run "ipsec verify". My solution is running
>> "service ipsec start" on host to load kernel module. Everything goes okay
>> when I run it. But I think the solution is too ungraceful. Does anyone
>> have a simple solution to resolve this problem instead of run "service
>> ipsec start"?
>> Zhi Chang
>> OpenStack Development Mailing List (not for usage questions)
>> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the OpenStack-dev