<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1491" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>hello:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>sorry for my english.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>i have a fedora core 2 with fresswan 2.06, and i do
static nat in tunnel vpn.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>with this type of configuration (doing static nat )
i have another two vpn tunnels work correctly:</FONT></DIV>
<DIV><FONT face=Arial size=2>one tunnel against a cisco vpn, and other one
against a nortel vpn, and both (work since 6 months ago) for
they</FONT></DIV>
<DIV><FONT face=Arial size=2>(cisco vpn or nortel vpn) my GW is my ip
public (80.82.108.47) , and they know nothing about my real GW vpn
(172.17.0.51),</FONT></DIV>
<DIV><FONT face=Arial size=2>they dont need it.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>but when tunnel is against a freeswan vpn server
appear a problem because seem that the GW B reads my ipsec.conf file and
</FONT></DIV>
<DIV><FONT face=Arial size=2>read: left=172.17.0.51, but in its ipsec.conf
172.17.0.51 dont exits, and only exits right=80.82.108.47</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>resuming: VPN B only see the public ip
(80.82.108.47) so in its ipsec.conf: right=80.82.108.47, but when IKE
negociation occur</FONT></DIV>
<DIV><FONT face=Arial size=2>server A communicate it 172.17.0.51 (instead of
80.82.108.47) and no IKE negociation occur:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><STRONG>Mar 15 09:48:38 fwint Pluto[7678]: "monteftp" #2: max number of
retransmissions (2) reached STATE_MAIN_R2 <BR>Mar 15 09:48:39 fwint Pluto[7678]:
"monteftp" #4: responding to Main Mode <BR>Mar 15 09:48:41 fwint Pluto[7678]:
"monteftp" #4: no suitable connection for peer '172.17.0.51' </STRONG></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial
size=2>subnet: 192.168.32.0/24</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>gateway VPN 172.17.0.51
(this is my tunnel GW VPN, but is a private ip, so to travel through internet i
must to static nated to a public ip: 80.82.108.47)</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>FIREWALL: do
source static nat to transform the private 172.17.0.51 to a public ip:
80.82.108.47</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>my subnet :
192.168.32.0/24</FONT></DIV>
<DIV><FONT face=Arial size=2>
|</FONT></DIV>
<DIV><FONT face=Arial size=2>
|</FONT></DIV>
<DIV><FONT face=Arial size=2>my GW VPN:(GW
A) |
172.17.0.51</FONT></DIV>
<DIV><FONT face=Arial size=2>
||
|
||</FONT></DIV>
<DIV><FONT face=Arial size=2>static nated
to |
80.82.108.47</FONT></DIV>
<DIV><FONT face=Arial size=2>
|
||</FONT></DIV>
<DIV><FONT face=Arial size=2>
| (tunnel)</FONT></DIV>
<DIV><FONT face=Arial size=2>
|
||</FONT></DIV>
<DIV><FONT face=Arial size=2>the other GW VPN:
|
65.47.25.1</FONT></DIV>
<DIV><FONT face=Arial size=2> GW
B
|</FONT></DIV>
<DIV><FONT face=Arial size=2>
|</FONT></DIV>
<DIV><FONT face=Arial size=2>the other subnet:
172.16.4.0/24</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>if static nat works wih cisco and nortel vpn, why
dont works with another freeswan?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV></BODY></HTML>