After some more reading in the book I have come to the conclusion this
is due to the fact that I have right=%any in more the one connection. I
am not sure how to get by this because simply enough when I take it out
of either or connection that connection fails to load.<br><br>Client Side I have this now.<br><br>conn linux-vpn<br> left=23.XX.XX.XX<br> right=%defaultroute<br> rightid=@<a href="http://Lappy.domain.com">
Lappy.domain.com</a><br> leftrsasigkey=0sAQNxbQY...<br> rightrsasigkey=0sAQN7/...<br> auto=add<br><br>Server Side I have this. (With right=%any my l2tp connection fails to load)<br><br>conn linux-vpn<br>
left=23.XX.XX.XX<br> leftrsasigkey=0sAQNxbQY...<br> right=%any<br> rightid=@<a href="http://Lappy.domain.com">Lappy.domain.com</a><br> rightrsasigkey=0sAQN7/...<br> auto=add<br><br>
I can connect. However I can do nothing. tcpdump shows some packets traveling in ESP under port 4500. I cant ping my internal subnet. I can not access my internal machines. Would adding leftsubnet=<a href="http://192.168.1.0/24"></b></font><font color="red"><b>MailScanner has detected a possible fraud attempt from "192.168.1.0" claiming to be</b></font> <font color="red"><b>MailScanner warning: numerical links are often malicious:
192.168.1.0/24</a> help ? What about the other ends subnet?<br><br>So still stuck with two problems. I thought leftid & rightid would solve my right=%any issue but it does not.<br><br><div><span class="gmail_quote">On 3/20/06,
<b class="gmail_sendername">Brett Curtis</b> <<a href="mailto:dashnu@gmail.com">dashnu@gmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
When adding a new connection (linux to linux) to my already working<br>ipsec/l2tp server, a connection from an XP client brings up this<br>connection on the server and not the working roadwarrior-lt2p connect.<br>Why is this? I would really like to understand why this connect starts
<br>up so I can continue to troubleshoot my linux to linux connect without<br>interfering with my remote windows users.<br><br>conn linux-road<br> left=23.XX.XX.XX<br> leftid=@vpn<br> leftsubnet=<a href="http://192.168.1.0/24"></b></font><font color="red"><b>MailScanner has detected a possible fraud attempt from "192.168.1.0" claiming to be</b></font> <font color="red"><b>MailScanner warning: numerical links are often malicious:
192.168.1.0/24</a><br> leftrsasigkey=0sAQNxbQYt.......<br> rightnexthop=%defaultroute<br> right=%any<br> rightid=@Lappy<br> rightrsasigkey=0sAQN7/HF........<br> auto=add<br><br>I am still stuck trying to get linux roadwarriors set up with my current
<br>lt2p settings. I now have PSK for windows and OSX and RSA keys for my<br>linux client. I have both of them in ipsec.secrets<br><br>With that config on my server and this on my linux client I get through<br>phase 1. but that is it.
<br><br>conn linux-road<br> left=%defaultroute<br> leftid=@Lappy<br> leftrsasigkey=0sAQN7/HF.....<br> right=23.XX.XX.XX<br> rightsubnet=<a href="http://192.168.1.0/24"></b></font><font color="red"><b>MailScanner has detected a possible fraud attempt from "192.168.1.0" claiming to be</b></font> <font color="red"><b>MailScanner warning: numerical links are often malicious: 192.168.1.0/24</a>
<br> rightid=@vpn<br> rightrsasigkey=0sAQNxbQYtVgyo.......<br> auto=add<br><br>As always thanks for the help.<br><br>Brett<br><br><br><br><br>-----BEGIN PGP SIGNATURE-----<br>Version: GnuPG v1.4.2.2 (GNU/Linux)
<br><br>iD8DBQBEHvAhSpGrHn80jWYRArMGAJ45ufKkHVV+lcd9pHcF/TXXHBUSewCgpWr+<br>KRxZ0Gv6bVrM0AesqPwaZK4=<br>=71Ze<br>-----END PGP SIGNATURE-----<br><br><br></blockquote></div><br>