frr icon indicating copy to clipboard operation
frr copied to clipboard

NHRP: [S2H7W-EAHAS] vici_reconnect: failure connecting VICI socket: Invalid argument

Open usr653345 opened this issue 2 years ago • 0 comments

Hi. I have a problem with my dmvpn test lab (on spoke node). Can you help? [Centos 8, strongswan 5.9.6-1. frr 8.3]

swanctrl.conf

connections { dmvpn { version=2 proposals=aes256-sha512-ecp384 dpd_delay=20s local_addrs=%any remote_addrs=%any keyingtries=0

    local {
        auth=psk
        id=%any
    }

    remote {
        auth=psk
        id=%any
    }

    children {
        dmvpn {
            start_action=none
            esp_proposals=aes256-sha512-ecp384
            local_ts=dynamic[gre]
            remote_ts=dynamic[gre]
            mode=tunnel
            dpd_action=clear
        }
    }
}

}

frr.conf (spoke)

frr version 8.3 frr defaults traditional hostname spoke1 log file /var/log/frr/frr.log no ip forwarding nhrp event socket /var/run/strongswan/charon.vici ! debug nhrp all ! interface gre1 description DMVPN Tunnel Interface ip address 10.99.99.2/32 ip nhrp network-id 1 ip nhrp nhs dynamic nbma 192.168.0.63 ip nhrp redirect ip nhrp registration no-unique ip nhrp shortcut no link-detect tunnel protection vici profile dmvpn tunnel source eth0 exit ! router bgp 1 bgp router-id 192.168.0.64 no bgp ebgp-requires-policy neighbor 10.99.99.1 remote-as 1 neighbor 10.99.99.1 disable-connected-check exit !

usr653345 avatar Jul 29 '22 17:07 usr653345