Hi,<br><br>Its a part of the project I'm currently working on.<br><br>IPsec over GRE works well between two linux boxes running openswan.<br>But its not working between openswan and cisco. <br>Please do point out where i'm messing up my configuration.
<br><br>Bholi.<br><br><div><span class="gmail_quote">On 9/6/07, <b class="gmail_sendername">Leonardo Rodrigues Magalhães</b> <<a href="mailto:leolistas@solutti.com.br">leolistas@solutti.com.br</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div bgcolor="#ffffff" text="#000000">
<br>
<br>
Bholi Patra escreveu:
<blockquote type="cite">Hi,<br>
<span class="q"><br>
I'm trying to run ipsec over GRE tunnels. I created 2 gre tunnels (<a href="http://1.1.1.1" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.1</a> on linux) and
(<a href="http://1.1.1.2" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.2</a> on cisco).<br>
They are able to ping each other well. <br>
Then I set up ipsec between <a href="http://1.1.1.1" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">1.1.1.1</a> and <a href="http://1.1.1.2" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
1.1.1.2</a>. This is where the problem arises. <br>
Openswan says the Phase I (ISAKMP SA established) but fails on Phase
II.
<br>
<br>
Please find attached contents of ipsec barf and cisco config.<br>
Point out if i'm messing something.<br>
</span></blockquote>
<br>
I just cant understand why you're trying IPSec over GRE .... is
this some real situation or just some proof-concept lab thing ???<br>
<br>
<pre cols="72">-- <br><br><br> Atenciosamente / Sincerily,<br> Leonardo Rodrigues<br> Solutti Tecnologia<br> <span class="q"><a href="http://www.solutti.com.br" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
http://www.solutti.com.br</a>
Minha armadilha de SPAM, NÃO mandem email
<a href="mailto:gertrudes@solutti.com.br" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">gertrudes@solutti.com.br</a>
My SPAMTRAP, do not email it
</span></pre>
</div>
<br clear="all"></blockquote></div><br><br clear="all"><br>-- <br>My opinions may have changed, but not the fact that I am right.