TomatoUSB

I can't for the life of me figure out how to get strongswan working with shibby's mod with entware. I have read through the strongswan site in detail, and I can't figure out how to get this server up and running. I only want to be able to setup an ike2 server (with AES256ctr and/or elliptic curve crypto if supported) so I can access the ftp server running off my router, and a few network shares while I'm out of town. The problem is I can no longer use openvpn (which I had running successfully in the past).

Can anyone provide a quick how-to? I have already installed entware, and have the following strongswan packages installed:

strongswan - 5.0.1-1
strongswan-charon - 5.0.1-1
strongswan-mod-aes - 5.0.1-1
strongswan-mod-af-alg - 5.0.1-1
strongswan-mod-ccm - 5.0.1-1
strongswan-mod-constraints - 5.0.1-1
strongswan-mod-curl - 5.0.1-1
strongswan-mod-dhcp - 5.0.1-1
strongswan-mod-farp - 5.0.1-1
strongswan-mod-gmp - 5.0.1-1
strongswan-mod-hmac - 5.0.1-1
strongswan-mod-kernel-netlink - 5.0.1-1
strongswan-mod-md5 - 5.0.1-1
strongswan-mod-nonce - 5.0.1-1
strongswan-mod-openssl - 5.0.1-1
strongswan-mod-pem - 5.0.1-1
strongswan-mod-pkcs1 - 5.0.1-1
strongswan-mod-pkcs11 - 5.0.1-1
strongswan-mod-pkcs8 - 5.0.1-1
strongswan-mod-pubkey - 5.0.1-1
strongswan-mod-random - 5.0.1-1
strongswan-mod-resolve - 5.0.1-1
strongswan-mod-revocation - 5.0.1-1
strongswan-mod-sha1 - 5.0.1-1
strongswan-mod-sha2 - 5.0.1-1
strongswan-mod-smp - 5.0.1-1
strongswan-mod-socket-default - 5.0.1-1
strongswan-mod-socket-dynamic - 5.0.1-1
strongswan-mod-stroke - 5.0.1-1
strongswan-mod-test-vectors - 5.0.1-1
strongswan-mod-updown - 5.0.1-1
strongswan-mod-x509 - 5.0.1-1
strongswan-utils - 5.0.1-1

Your help is greatly appreciated.

have you tried theirs wiki ?
ht-tp://wiki.strongswan.-org/projects/strongswan/wiki/UserDocumentation#Configuration-HOWTOs

remove "-"

I decided to give this another go. I can't get the server to start up:

root@unknown:/opt/extras# ipsec start
Starting strongSwan 5.0.1 IPsec [starter]…
!! Your strongswan.conf contains manual plugin load options for charon.
!! This is recommended for experts only, see
!! htt-p://wiki.strongswan.o-rg/projects/strongswan/wiki/PluginLoad
insmod: '-qv.ko': module not found
no netkey IPsec stack detected
modprobe: module ipsec not found in modules.dep
no KLIPS IPsec stack detected
no known IPsec stack detected, ignoring!

I can't find these modules anywhere. I also downloaded shibby's extras.mips2.tar.gz, though these modules are not included in this file. Does anyone know where I can find these modules?

I have the exact same problem. I posted a link on the entware site as well: htt-p://code.google.c-om/p/wl500g-repo/issues/detail?id=30

Hoping to have a resolution soon.

root@unknown:/opt/extras# ipsec start
Starting strongSwan 5.0.1 IPsec [starter]…
!! Your strongswan.conf contains manual plugin load options for charon.
!! This is recommended for experts only, see
!! htt-p://wiki.strongswan.o-rg/projects/strongswan/wiki/PluginLoad
insmod: '-qv.ko': module not found
no netkey IPsec stack detected
modprobe: module ipsec not found in modules.dep
no KLIPS IPsec stack detected
no known IPsec stack detected, ignoring!

root@unknown:/tmp/home/root# strings /opt/lib/ipsec/starter | grep qv
insmod -qv af_key
insmod -qv ah4
insmod -qv esp4
insmod -qv ipcomp
insmod -qv xfrm4_tunnel
insmod -qv xfrm_user
modprobe -qv ipsec
modprobe -qv ipsec_aes
modprobe -qv ipsec_blowfish
modprobe -qv ipsec_sha2

This is a direct response from the Entware page I posted above, maybe this will be helpful. (remove dashes from URL in msg above)

"Guys, the busybox you are using with Tomato can't recognize a (-qv) key.
You may load necessary ipsec modules _before_ starting openswan.

Entware is a firmware independed and can't do firmware-specific changes there. Still, will look what I can get, I promise."

ryzhovau from the Entware maintainers has created a patch that should assist. He was extremely helpful in looking into this and preparing a patch. Be sure to thank him if it works for you!

Check the links below. (remove the dashes)

htt-ps://code.google.c-om/p/wl500g-repo/source/detail?r=1164

htt-p://www.linksysinfo.o-rg/index.php?threads/tomato-and-ipsec-why-not.38344/#post-224362