Hi all,<br><br>I have installed Linux Openswan U2.4.7/K2.6.9-5.ELsmp (netkey) on 2 machines for network to network connection.<br>My config file contains :<br><br>conn test<br> type=tunnel<br> keyexchange=ike<br> keylife=2h
<br> ikelifetime=24h<br> pfs=no<br> ike=3des-md5-modp1024<br> esp=3des-md5<br> left=<a href="http://192.168.0.109">192.168.0.109</a><br> #leftnexthop=<a href="http://192.168.92.1">192.168.92.1</a><br> #leftsourceip=
<a href="http://10.215.144.92">10.215.144.92</a><br> leftsubnet=<a href="http://10.0.0.0/8">10.0.0.0/8</a><br> right=<a href="http://192.168.0.2">192.168.0.2</a><br> rightsubnet=<a href="http://192.168.0.0/24">192.168.0.0/24
</a><br> #rightid=<br> #leftid=<br> authby=secret<br> auto=start<br><br>But when I start openswan, I got this in /var/log/secure :<br><br>May 21 18:53:26 localhost ipsec__plutorun: Starting Pluto subsystem...<br>May 21 18:53:26 localhost pluto[18255]: Starting Pluto (Openswan Version
2.4.7 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR; Vendor ID OEZ~BaB]r\134p_)<br>May 21 18:53:26 localhost pluto[18255]: Setting NAT-Traversal port-4500 floating to on<br>May 21 18:53:26 localhost pluto[18255]: port floating activation criteria nat_t=1/port_fload=1
<br>May 21 18:53:26 localhost pluto[18255]: including NAT-Traversal patch (Version 0.6c)<br>May 21 18:53:26 localhost pluto[18255]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)<br>May 21 18:53:26 localhost pluto[18255]: no helpers will be started, all cryptographic operations will be done inline
<br>May 21 18:53:26 localhost pluto[18255]: Using NETKEY IPsec interface code on 2.6.9-5.ELsmp<br>May 21 18:53:27 localhost pluto[18255]: Changing to directory '/etc/ipsec.d/cacerts'<br>May 21 18:53:27 localhost pluto[18255]: Changing to directory '/etc/ipsec.d/aacerts'
<br>May 21 18:53:27 localhost pluto[18255]: Changing to directory '/etc/ipsec.d/ocspcerts'<br>May 21 18:53:27 localhost pluto[18255]: Changing to directory '/etc/ipsec.d/crls'<br>May 21 18:53:27 localhost pluto[18255]: Warning: empty directory
<br>May 21 18:53:27 localhost pluto[18255]: added connection description "test"<br>May 21 18:53:27 localhost pluto[18255]: listening for IKE messages<br>May 21 18:53:27 localhost pluto[18255]: adding interface eth1/eth1
<a href="http://10.0.0.1:500">10.0.0.1:500</a><br>May 21 18:53:27 localhost pluto[18255]: adding interface eth1/eth1 <a href="http://10.0.0.1:4500">10.0.0.1:4500</a><br>May 21 18:53:27 localhost pluto[18255]: adding interface eth0/eth0
<a href="http://192.168.0.109:500">192.168.0.109:500</a><br>May 21 18:53:27 localhost pluto[18255]: adding interface eth0/eth0 <a href="http://192.168.0.109:4500">192.168.0.109:4500</a><br>May 21 18:53:27 localhost pluto[18255]: adding interface lo/lo
<a href="http://127.0.0.1:500">127.0.0.1:500</a><br>May 21 18:53:27 localhost pluto[18255]: adding interface lo/lo <a href="http://127.0.0.1:4500">127.0.0.1:4500</a><br>May 21 18:53:27 localhost pluto[18255]: adding interface lo/lo ::1:500
<br>May 21 18:53:27 localhost pluto[18255]: loading secrets from "/etc/ipsec.secrets"<br>May 21 18:53:27 localhost pluto[18255]: "test" #1: initiating Main Mode<br>May 21 18:53:27 localhost pluto[18255]: packet from
<a href="http://192.168.0.2:500">192.168.0.2:500</a>: ignoring informational payload, type NO_PROPOSAL_CHOSEN<br>May 21 18:53:27 localhost pluto[18255]: packet from <a href="http://192.168.0.2:500">192.168.0.2:500</a>: received and ignored informational message
<br>May 21 18:53:30 localhost pluto[18255]: packet from <a href="http://192.168.0.2:500">192.168.0.2:500</a>: received Vendor ID payload [Openswan (this version) 2.4.7 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]<br>May 21 18:53:30 localhost pluto[18255]: packet from
<a href="http://192.168.0.2:500">192.168.0.2:500</a>: received Vendor ID payload [Dead Peer Detection]<br>May 21 18:53:30 localhost pluto[18255]: "test" #2: responding to Main Mode<br>May 21 18:53:30 localhost pluto[18255]: "test" #2: Can't authenticate: no preshared key found for `192.168.0.109' and `192.168.0.2'. Attribute OAKLEY_AUTHENTICATION_METHOD
<br>May 21 18:53:30 localhost pluto[18255]: "test" #2: no acceptable Oakley Transform<br>May 21 18:53:30 localhost pluto[18255]: "test" #2: sending notification NO_PROPOSAL_CHOSEN to <a href="http://192.168.0.2:500">
192.168.0.2:500</a><br>May 21 18:53:37 localhost pluto[18255]: packet from <a href="http://192.168.0.2:500">192.168.0.2:500</a>: ignoring informational payload, type NO_PROPOSAL_CHOSEN<br>May 21 18:53:37 localhost pluto[18255]: packet from
<a href="http://192.168.0.2:500">192.168.0.2:500</a>: received and ignored informational message<br>May 21 18:53:50 localhost pluto[18255]: packet from <a href="http://192.168.0.2:500">192.168.0.2:500</a>: received Vendor ID payload [Openswan (this version)
2.4.7 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]<br>May 21 18:53:50 localhost pluto[18255]: packet from <a href="http://192.168.0.2:500">192.168.0.2:500</a>: received Vendor ID payload [Dead Peer Detection]<br><br><br>Please help me!
<br><br>Best regards<br>--<br>Djiby<br><br><br>