<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=windows-1252">
<META content="MSHTML 6.00.2800.1458" name=GENERATOR></HEAD>
<BODY style="FONT: 10pt Courier New; COLOR: #000000" leftMargin=5 topMargin=5>
<DIV>Hello</DIV>
<DIV> </DIV>
<DIV>I am refering to my mail " Phase1 IKE working ? Phase2 apparently not"
</DIV>
<DIV>from this morning ;)</DIV>
<DIV> </DIV>
<DIV>According to my log I seem to have a problem establishing the IPsec
SAs</DIV>
<DIV>because of my ipsec.conf.</DIV>
<DIV> </DIV>
<DIV>Here is what Pluto is telling me:</DIV>
<DIV>pluto: "roadwarrior"[2] 192.168.1.111 #1: cannot respond to IPsec SA
request because no connection is known for
192.168.1.0/24===192.168.1.35[S=C]...192.168.1.111[0.0.0.0,S=C]</DIV>
<DIV>pluto: state transition function for STATE_QUICK_RO failed:
INVALID_ID_INFORMATION</DIV>
<DIV> </DIV>
<DIV>My ipsec.conf:</DIV>
<DIV>version 2</DIV>
<DIV> </DIV>
<DIV>config setup</DIV>
<DIV>klipsdebug=none</DIV>
<DIV>plutodebug=control</DIV>
<DIV> </DIV>
<DIV>conn %default</DIV>
<DIV>keyingtries=1</DIV>
<DIV>compress=no</DIV>
<DIV>keyexchange=ike</DIV>
<DIV>authby=secret</DIV>
<DIV> </DIV>
<DIV>conn roadwarrior</DIV>
<DIV>left=192.168.1.35</DIV>
<DIV>right=%any</DIV>
<DIV>rightid=%any</DIV>
<DIV>auto=add</DIV>
<DIV> </DIV>
<DIV>include /etc/ipsec.d/example/no_oe.conf</DIV></BODY></HTML>