<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=US-ASCII" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Paul Wouters wrote:
<blockquote cite="midPine.LNX.4.63.0609131834000.7303@tla.xelerance.com"
type="cite">
<pre wrap="">On Wed, 13 Sep 2006, Luca Andreoli wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Subject: [Openswan Users] safenet + openswan
i try to do a vpn connection in T-NAT
but the /var/log/secure
</pre>
</blockquote>
<pre wrap=""><!---->
</pre>
<blockquote type="cite">
<pre wrap="">Sep 13 17:20:45 mantofw pluto[12859]: "vpn-laptop"[3] 83.103.71.142 #3:
NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: peer is NATed
Sep 13 17:20:45 mantofw pluto[12859]: "vpn-laptop"[3] 83.103.71.142 #3:
transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Sep 13 17:21:55 mantofw pluto[12859]: "vpn-laptop"[3] 83.103.71.142 #3:
max number of retransmissions (2) reached STATE_MAIN_R2
</pre>
</blockquote>
<pre wrap=""><!---->
The other end is silently dropping your connection, so this is probably
some misconfiguration of the two ends.
</pre>
<blockquote type="cite">
<pre wrap=""> plutoload=%search
plutostart=%search
</pre>
</blockquote>
<pre wrap=""><!---->
And this shows you are suing openswan-1, which has reached EOL 9 months ago.
Upgrade to openswan-2.
</pre>
<blockquote type="cite">
<pre wrap=""> nat_traversal=yes
# RFC1918 networks
#virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16
virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16,!%v4:192.4.0.0/24
</pre>
</blockquote>
<pre wrap=""><!---->
That last bit should be %v4:!192.4.0.0/24
Paul
</pre>
</blockquote>
Paul is correct... the subnet is /24 , is a mistake error of the
customer... but i can't upgarde to openswan because the redhat is 8<br>
<br>
luca<br>
<br>
</body>
</html>