Hi,
I had had the same problem, I remember that I solve the problem kill
the process, because when you run setkey then you can not run again
setkey until that you kill the running process, try to find ID (ps
waux) and then kill -9.
On 3/5/07, Michael P. Soulier <michael_soulier@mitel.com>
wrote:> Hello,
>
> I''m trying to put 3 nodes in a vpn in tunnel mode.
>
> When I run setkey on the following file, I end up with
>
> The result of line 33: File exists.
>
> That error isn''t overly helpful, so I was hoping that someone
could explain
> the issue.
>
> Here''s the file, with line 33 highlighted.
>
> Help appreciated.
>
> Mike
>
> # Flush the SAD and SPD
> flush;
> spdflush;
>
> # Add SA for 10.33.15.145 to 10.31.8.96 in tunnel mode
> add 10.33.15.145 10.31.8.96 esp 0x201 -m tunnel -E 3des-cbc
> 0xB1A03D22D78D6357084B13E930A27F72ECAFB61B5D398A22
> -A hmac-md5 0x2F9FCE98685ED329C2E9A5C6CC7C5E20;
> # Add SA for 10.31.8.96 to 10.33.15.145 in tunnel mode
> add 10.31.8.96 10.33.15.145 esp 0x301 -m tunnel -E 3des-cbc
> 0x80C16F148B2C11A0E65939D9D945C5630BE09B7F2EC75186
> -A hmac-md5 0xFC2B609F54DFFA62040AC8D9A4657387;
>
> # Add SA for 10.33.15.145 to 10.33.15.151 in tunnel mode
> add 10.33.15.145 10.33.15.151 esp 0x201 -m tunnel -E 3des-cbc
> 0xB1A03D22D78D6357084B13E930A27F72ECAFB61B5D398A22
> -A hmac-md5 0x2F9FCE98685ED329C2E9A5C6CC7C5E20;
> # Add SA for 10.33.15.151 to 10.33.15.145 in tunnel mode
> add 10.33.15.151 10.33.15.145 esp 0x301 -m tunnel -E 3des-cbc
> 0xE0C9C70351CD3B4E2D9024FC1CACBC8B0D288E6981417259
> -A hmac-md5 0x8FC64D13209EFC7732D4A9A1159BA758; <======== line 33
>
>
> # Add policy for 172.16.113.0/24 -> 192.168.19.0/24 over
> # the 10.33.15.145-10.31.8.96 tunnel
> spdadd 172.16.113.0/24 192.168.19.0/24 any -P out ipsec
> esp/tunnel/10.33.15.145-10.31.8.96/require;
>
> # Add policy for 192.168.19.0/24 -> 172.16.113.0/24 over
> # the 10.31.8.96-10.33.15.145 tunnel
> spdadd 192.168.19.0/24 172.16.113.0/24 any -P in ipsec
> esp/tunnel/10.31.8.96-10.33.15.145/require;
>
> # Add policy for 172.16.113.0/24 -> 172.16.129.0/24 over
> # the 10.33.15.145-10.33.15.151 tunnel
> spdadd 172.16.113.0/24 172.16.129.0/24 any -P out ipsec
> esp/tunnel/10.33.15.145-10.33.15.151/require;
>
> # Add policy for 172.16.129.0/24 -> 172.16.113.0/24 over
> # the 10.33.15.151-10.33.15.145 tunnel
> spdadd 172.16.129.0/24 172.16.113.0/24 any -P in ipsec
> esp/tunnel/10.33.15.151-10.33.15.145/require;
>
> --
> Michael P. Soulier <michael_soulier@mitel.com>, 613-592-2122 x2522
> "Any intelligent fool can make things bigger and more complex... It
takes a
> touch of genius - and a lot of courage to move in the opposite
direction."
> --Albert Einstein
> _______________________________________________
> LARTC mailing list
> LARTC@mailman.ds9a.nl
> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
>
--
"The network is the computer"