IPSEC tunnel fails with "pfkey UPDATE failed: Invalid argument"

IPSEC tunnel fails with "pfkey UPDATE failed: Invalid argument"

Post by Georg » Fri, 30 Sep 2005 11:46:59


        May someone please tell me why the IPSEC tunnel I try to make fails as

racoon -F -f /etc/racoon/racoon.cfg
Foreground mode.


2004 (http://www.openssl.org/)
2005-09-28 22:34:40: INFO:[500] used as isakmp port (fd=5)
2005-09-28 22:34:40: INFO:[500] used for NAT-T
2005-09-28 22:34:40: INFO: IPsec-SA request for queued due to
no phase1 found.
2005-09-28 22:34:40: INFO: initiate new phase 1 negotiation:
2005-09-28 22:34:40: INFO: begin Identity Protection mode.
2005-09-28 22:34:45: INFO: ISAKMP-SA established
[500]-[500] spi:e095758065e98bfa:1b2c7ac9b51a6ffe
2005-09-28 22:34:46: INFO: initiate new phase 2 negotiation:
2005-09-28 22:34:47: ERROR: pfkey UPDATE failed: Invalid argument
2005-09-28 22:34:47: ERROR: pfkey ADD failed: Invalid argument
2005-09-28 22:35:16: ERROR: give up to get IPsec-SA due to
time up to wait.
2005-09-28 22:35:16: INFO: IPsec-SA expired: ESP/Tunnel> spi=230932054(0xdc3be56)

        What that means and how should I correct the problem? All necessary options
for IPSEC are in the kernel (2.6.13) that I use. I also run NAT firewall on
that box, but it should not affect things. What means pfkey UPDATE failed?

        Any help appreciated,


IPSEC tunnel fails with "pfkey UPDATE failed: Invalid argument"

Post by Georg » Fri, 30 Sep 2005 23:40:55

        Ok, I found it: I compiled ipsec-tools package against headers from 2.4
release kernel and executed them on a computer running 2.6 release of
kernel. A recompile against 2.6 kernel tree fixed the problem.



1. "Mount Failed: Invalid Argument"

When trying to install Mandrake 7.2, with the boot disk I had created
in my floppy, and the Installation ISO disk I had burned from Linux-
Mandrake.Com's site in my CD-Rom, when it seems to be setting up the
next installation screen after "Initializing CD-Rom":

"Mount Failed: Invalid Argument"

So the message says that this should not happen, so it is stopping the
install, and you have to reboot.

*sigh* It sucks being a newbie again. :}

This system is a Pentium 166 MMX w/ 80 MB RAM:
C:\ 2 GB Drive (Win95)
D:\ 3.5 GB Drive (Currently Win95, but I wanted to put Mandrake here,
for a dual boot system... if I get it to ever install. ;})
E:\ Sony ATAPI CDU-511 16x (I -think- it is 16x) CD-Rom

mandrake.com archive was to hit CTRL-ALT-(F3 thru F5) after the error,
and this resulted in finding, relating to the CD, when Mandrake was
trying to set up it was:

* Running the ide_probe.o, ide_probe.mod (Failed)
* Ran the cd_rom.o and ide_cd.o (Ran OK)
* Said that hdc: ATAPI 8x CD-Rom Drive, 128 kb cache
* At the very end of the process, it did tons of "Attempt to access
beyond the end of this device" errors.
* "VFS: Can't find an ext2 file system on dev ramdisk"

Uh, why would the ide_probe fail? Should it have been trying to mound
hdd as the CD-Rom? How can this be fixed? What is the average air-speed
velocity of an unladen swallow? ;}

Thank you for listening to me babble. ;}

-T.J. Maher

Sent via Deja.com

2. Netkit-base sources

3. "mount failed: invalid argument" during install

4. 2.2.19: config help text about "TCO timer"

5. 1 * HRFlHCkDK-TCP socket: "accept" failed: Invalid argument

6. Parallel Port

7. Problems installing on PB G3 - "Mount Failed - Invalid Argument"


9. On install (Red Hat 5.0) "mount failed: invalid argument" with a Funai E2550UA CD

10. On install (Red Hat 5.0) "mount failed: invalid argument" with a Funai

11. TCP socket: "accept" failed: Invalid argument

12. Red Hat Installation..."mount failed: Invalid Argument"

13. TCP socket: "accept" failed: Invalid argument