<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1491" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>hello everyone:</FONT></DIV>
<DIV> </DIV><FONT face=Arial size=2>
<DIV><BR>in my net, my VPN (server SERVER_A) is in internal network, so the
interface ipsec0 is 172.17.0.51 (private ip), <BR>in my ipsec.conf my Gateway is
172.17.0.51 (left=172.17.0.51), but when tis IP arrives to my Firewall,
<BR>is nated (static nat) to a public IP to go out to internet ( for example to
a 80.45.12.28). <BR>the other part of VPN ( SERVER_B) must have in its
ipsec.conf : right=80.45.12.28 because it see arrives the packets <BR>from the
public IP (80.45.12.28), but when IKE negociation a mistake occur because the
Gateway that the SERVER_A <BR>communicate it is 172.17.0.51 and not 80.45.12.28:
<BR> <BR>Mar 15 09:48:38 fwint Pluto[7678]: "monteftp" #2: max number of
retransmissions (2) reached STATE_MAIN_R2 <BR>Mar 15 09:48:39 fwint Pluto[7678]:
"monteftp" #4: responding to Main Mode <BR>Mar 15 09:48:41 fwint Pluto[7678]:
"monteftp" #4: no suitable connection for peer '172.17.0.51' </DIV>
<DIV> </DIV>
<DIV>this is the problem: SERVER_B in its ipsec.conf must have right=80.45.12.28
because is the IP that it see arrives and send <BR>the packets, but in the
IKE negociation SERVER_A say to SERVER_B that SERVER_A is 172.17.0.51 and not
80.45.12.28, <BR>and cause the error: no suitable connection for peer
'172.17.0.51' <BR> <BR> <BR>SERVER_A--------------FIREWALL
----------internet-------------- SERVER_B <BR>172.17.0.51(nated
to:)80.45.12.28 <BR> <BR>i need a solucion. <BR>
<BR>thanks.</FONT></DIV></BODY></HTML>