I'm setting up IPSec VPN and I have met an error which upon searching I found the error actually means required kernel modules are missing. That prompted me to check that with
kmod list but both give an empty list.
That sounds to me like there is no loaded kernel module (sounds strange and unlikely to me but I have no other explanations) and so I need to load them in case they are there but not loaded or install them in case they are not there.
How do I do that?
I operate Debian 9 Box with Strongswan 5.1 as IPSec VPN Software
The error I get is this one
ipsec up conn-name establishing CHILD_SA conn-name generating CREATE_CHILD_SA request 937 [ SA No KE TSi TSr ] sending packet: from <MY IP> to <DEST IP> (496 bytes) received packet: from <DEST IP> to <MY IP> (352 bytes) parsed CREATE_CHILD_SA response 937 [ N(ESP_TFC_PAD_N) SA No KE TSi TSr ] received ESP_TFC_PADDING_NOT_SUPPORTED, not using ESPv3 TFC padding received netlink error: Protocol not supported (93) unable to add SAD entry with SPI c845df8d received netlink error: Protocol not supported (93) unable to add SAD entry with SPI 009fbcd3 unable to install inbound and outbound IPsec SA (SAD) in kernel failed to establish CHILD_SA, keeping IKE_SA sending DELETE for ESP CHILD_SA with SPI c845df8d generating INFORMATIONAL request 938 [ D ] sending packet: from <MY IP> to <DEST IP> (80 bytes) received packet: from <DEST IP> to <MY IP> (80 bytes) parsed INFORMATIONAL response 938 [ D ] establishing connection 'conn-name' failed
#lsmod Module Size Used by
Linux xxx 2.6.32-042stab127.2 #1 SMP Thu Jan 4 16:41:44 MSK 2018 x86_64 GNU/Linux
cat /proc/modules is empty
Is this your own hardware, some virtualization
It is a VPS actually so I have no control over the hardware