Frees/wan setup problems

[bscott at ntisys.com]

On 25 Feb 2003, at 4:34pm, cole at tuininga.org wrote:
> Hi all - I'm trying to set up frees/wan.  Does anybody have experience
> setting it up and (more to the point) debugging a setup?

  I have more experience debugging FreeS/WAN (and related protocols and
products) than I care to remember.  Ask away.  :)

  General words of advice:

  - Watch the syslog.  Even at the default logging levels of "none", 
    FreeS/WAN logs gobs of debugging information that can be very helpful.
  - If the logs lack detail, use the "klipsdebug" and "plutodebug" 
    statements in your ipsec.conf file to get more information.
  - Use sniffers extensively to watch network traffic.
  - Use *separate* computers for the sniffers.  Putting FreeS/WAN and
    the sniffer on the same system will just confuse things more.

> I've got it installed on both ends and supposedly have a connection going,
> but I'm getting some weird behaviour.

  Define "weird".  :)

  Also, I encourage you to keep the discussion on-list.  It is (1) on-topic
(which is rare enough for us as it is), and (2) likely to be useful for
others (if not now, then in searching the archives in the future).

-- 
Ben Scott <bscott at ntisys.com>
| The opinions expressed in this message are those of the author and do  |
| not represent the views or policy of any other person or organization. |
| All information is provided without warranty of any kind.              |