Red Hat Bugzilla – Bug 118683
ipsec fails to start
Last modified: 2014-03-16 22:43:24 EDT
Description of problem: ipsec fails to start. Version-Release number of selected component (if applicable): How reproducible: Always. Steps to Reproduce: 1. Follow instructions at file:///usr/share/doc/rhel-sg-en-3/s1-ipsec-host2host.html Red Hat Enterprise Linux 3: Security Guide Chapter 6. Virtual Private Networks 6.11. IPsec Host-to-Host Configuration 2. /sbin/ifup ipsec0 3. Get Error: Usage: grep [OPTION]... PATTERN [FILE]... Try `grep --help' for more information. Usage: grep [OPTION]... PATTERN [FILE]... Try `grep --help' for more information. Missing config file ifcfg-ifcfg-ipsec0. Actual results: Error Message. Expected results: IPSec Works. Additional info:
Can you attach your config files?
[root@rhel glenn]# cat /etc/sysconfig/network-scripts/ifcfg-ipsec0 DST=XXX.XXX.239.7 TYPE=IPsec ONBOOT=no IKE_METHOD=PSK [root@rhel glenn]# cat /etc/sysconfig/network-scripts/keys-ipsec0 IKE_PSK=XXXXXXXXXXXXX [root@rhel glenn]# (X's not in actual files)
Hi Glenn, I just ran into this problem myself and did some digging through the scripts. This appears to be a capitalization error in the manual. While the manual's example says TYPE=IPsec However, /etc/sysconfig/network-scripts/ifup-ipsec says # ifup-ipsec # # Brings up ipsec interfaces # # Configuration parameters # # SRC = source address. Not required. # DST = destination address # TYPE = IPSEC By changing the line TYPE=IPsec to TYPE=IPSEC, ifup recognizes the interface as a real IPsec interface and passes it on to the proper setup script (which if ifup-ipsec in this case). Marc
Apologies for the lack of response - does making the suggested change work for you?
*** This bug has been marked as a duplicate of 113090 ***
Changed to 'CLOSED' state since 'RESOLVED' has been deprecated.