Today I had to install another Bubba3 server together with an VPN service. Having the need of allowing Windows systems to logon with its native client (via VPN transport mode) my choice went to Openswan. After learning that the automatic detection of the KLIPS and/or NETKEY stack is broken in the case of road warriors with NAT enabled, I added the line
config setup # ... protostack netkey
in the /etc/ipsec.conf file (please note that this may be necessary, even though KLIPS may not be available and autodetection of the stack falls back to NETKEY support). That worked out during my first tests. However, soon after I got the problem that the kernel oops’ed with an error message like
kernel: Internal error: Oops: 5 [#1] kernel: Process mv_crypto (pid: 563, stack limit = 0xdfb80270) kernel: Stack: (0xdfb81ef4 to 0xdfb82000)
Continue reading ‘mv_crypto Oops with OpenSWAN / NETKEY on Excito Bubba3’ »