<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.2912" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=190002708-20082006><FONT face=Arial size=2>I need to create a
site-to-site vpn link between Openswan running on Fedora and PIX on the other
side. There are no private subnets to connect to. Both the sites have public IPs
on all machines. </FONT></SPAN></DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial size=2>Site A (Openswan on
Fedora)</FONT></SPAN></DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial size=2>
Public IP on openswan (Gateway): A.1.1.2/29</FONT></SPAN></DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial size=2>
HTTP Server: A.1.1.3/29</FONT></SPAN></DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial size=2>
ISP's router: A.1.1.1/29</FONT></SPAN></DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial size=2>Site B
(Pix)</FONT></SPAN></DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial size=2>
Public IP on PIX (Gateway): B.1.1.2</FONT></SPAN></DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial size=2>
HTTP Server: B.1.1.3</FONT></SPAN></DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial size=2>
ISP's router: B.1.1.1</FONT></SPAN></DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial size=2>I can't get the
tunnel to work. /var/log/messages gives: cannot start mytunnel. Please
help.</FONT></SPAN></DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial
size=2>Thanks.</FONT></SPAN></DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial size=2>-
sikaru</FONT></SPAN></DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial size=2>ipsec.conf is given
below. </FONT></SPAN></DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial size=2># /etc/ipsec.conf -
Openswan IPsec configuration file<BR># RCSID $Id: ipsec.conf.in,v 1.15.2.2
2005/11/14 20:10:27 paul Exp $</FONT></SPAN></DIV>
<DIV> </DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial size=2># This file:
/usr/share/doc/openswan/ipsec.conf-sample<BR>#<BR>#
Manual: ipsec.conf.5</FONT></SPAN></DIV>
<DIV> </DIV><SPAN class=190002708-20082006>
<DIV><BR><FONT face=Arial size=2>version 2.0 # conforms
to second version of ipsec.conf specification</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2># basic configuration<BR>config
setup<BR> #
virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%4:172.16.0.0/12<BR>
interfaces=%defaultroute<BR>
klipsdebug=all<BR> plutodebug=all<BR>#
Add connections here</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2># sample VPN connection<BR></FONT><STRONG><FONT
face=Arial color=#0000ff size=2>conn <SPAN
class=190002708-20082006>my</SPAN>tunnel<BR>
type=tunnel<BR>
left=<SPAN
class=190002708-20082006>A.1.1.2</SPAN><BR>
leftsubnet=<SPAN
class=190002708-20082006>A.1.1.0/29</SPAN><BR></FONT></STRONG><STRONG><FONT
face=Arial color=#0000ff
size=2>
leftnexthop=<SPAN
class=190002708-20082006>A.1.1.1</SPAN><BR>
right=<SPAN
class=190002708-20082006>B.1.1.2</SPAN><BR>
rightsubnet=<SPAN
class=190002708-20082006>B.1.1.0/29</SPAN><BR>
rightnexthop=<SPAN
class=190002708-20082006>B.1.1.1</SPAN><BR>
keyexchange=ike<BR>
ikelifetime=86400s<BR>
pfs=no<BR>
auto=start</FONT></STRONG></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>#Disable Opportunistic Encryption<BR>include
/etc/ipsec.d/examples/no_oe.conf<BR></FONT></SPAN></DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=190002708-20082006><FONT face=Arial
size=2></FONT></SPAN> </DIV></BODY></HTML>