<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7652.24">
<TITLE>OpenSWAN node to node connection</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<BR>
<P><FONT SIZE=2 FACE="Arial">I am trying to connect two linux systems through router (both are directly conncted to LinkSys router).</FONT>
<BR><FONT SIZE=2 FACE="Arial">The IP of each system are 192.168.1.100 and 192.168.1.101.</FONT>
<BR><FONT SIZE=2 FACE="Arial">The gateway IP of the router is 192.168.1.1</FONT>
<BR><FONT SIZE=2 FACE="Arial">I also named the 2 linux boxes as box1@left.com and box2@right.com</FONT>
<BR><FONT SIZE=2 FACE="Arial">Both of them has openSWAN installed. Ipsec is started on both.</FONT>
<BR><FONT SIZE=2 FACE="Arial">Attached are the 2 IPSec.conf files.</FONT>
<BR><FONT SIZE=2 FACE="Arial">When I run the command on the left system as described at </FONT><A HREF="http://wiki.openswan.org/index.php/Openswan/Configure"><U><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">http://wiki.openswan.org/index.php/Openswan/Configure</FONT></U></A>
<BR><FONT SIZE=2 FACE="Arial">I do not get tunnel established. It retries retransimission and hangs.</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">The command used is</FONT>
<BR><FONT SIZE=2 FACE="Arial">Ipsec auto --up net-to-net</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">My goal is to get 2 systems connected as client -server over VPN tunnel using IPSec.</FONT>
<BR><FONT SIZE=2 FACE="Arial">Can any one comment on the config. Is it correct? What is to be changed?</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">The left system has IP with DHCP configured. The right system has static IP configured, as suggested in the document.</FONT>
<BR><FONT SIZE=2 FACE="Arial">Thanks,</FONT>
<BR><FONT SIZE=2 FACE="Arial">Srinivas</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Left system IPSec.conf:</FONT>
<BR><FONT SIZE=2 FACE="Courier New">conn net-to-net</FONT>
<BR> <FONT SIZE=2 FACE="Courier New">left=%defaultroot # also tried with 192.168.1.100 but same result</FONT>
<BR> <FONT SIZE=2 FACE="Courier New">leftid=@left.com</FONT>
<BR> <FONT SIZE=2 FACE="Courier New">leftsubnet=192.168.1.1/24</FONT>
<BR> <FONT SIZE=2 FACE="Courier New">leftrsasigkey=0sAQOE4rLjh9bL3szKqCwxSoHT84l+jGbfPcUfNs9BDL2UAwEITq1MVmHIQHwo2UX8aQ5ObSnDQYVODwf5gYIGzmShqpt0FEFN8ewYIdxkPvcSLiC5AgLsGBO0Lu4o2A4VOx6btaiTygcFtpyrvNGdpWFJiLe5TeExV+TaaxS8Uq3x4b/3FUsFsH3AfS3CN7qnKeCpZN54y3qOBzxxmQNKR/scV5pLIQr60FFOG1O5GYqhFAZR9gTIC998V5USMz0LpB6aNir7avE5dTdWcypunyZFWPDyZXyDt6gtNgaX/1G+b1yCKGOGZD+5pIdOBnzp1wArmo+Rmvuw9ifisM/DI6rT8tEI0ZgcxsV5RR6tLlaOg3dd</FONT></P>
<P><FONT SIZE=2 FACE="Courier New"> right=192.168.1.101</FONT>
<BR> <FONT SIZE=2 FACE="Courier New">rightid=@right.com</FONT>
<BR> <FONT SIZE=2 FACE="Courier New">rightsubnet=192.168.1.1/24</FONT>
<BR><FONT SIZE=2 FACE="Courier New">rightrsasigkey=0sAQN8O4IdR8iTX7C5r38mkS/Lgy3UbkuirD624dei/HbmfrhanH4fwIdNGZu++IbfC5lr1fJH5+XVhAI5yYljj6I1KW+p+X3y+qL78jiWCJAfQhSdePqrP1uvTOFJ89RcFCn8gQexcGSr2cq2hFW7Bny8+L1Az/YxEskhNO47dDoRn739WtrYS3eE/B/NJyFrucrZf8wtKm7FF2cOIknWJ1s4YlRvXZ1kokvDa3gPAugL9I1KGJ8KuFKR0p1gdwWXWfWVPDktpSVV6MxmyDt2IYJSWBrLzDEFEI9OgB9R4PWgC38w5bf7uxkJXxC+K47EX9yr1F5JMWbh4jvefStlQSKY2SgygQ6BO/Ua70MoIAxyy76N</FONT></P>
<P> <FONT SIZE=2 FACE="Courier New">auto=add</FONT>
</P>
<BR>
<P><FONT SIZE=2 FACE="Arial">Right system IPSec.conf : I switched the setting as mentioned in RoadWarrior configuration</FONT>
</P>
<P><FONT SIZE=2 FACE="Courier New">conn net-to-net</FONT>
<BR> <FONT SIZE=2 FACE="Courier New">left=192.168.1.101</FONT>
<BR> <FONT SIZE=2 FACE="Courier New">leftid=@right.com</FONT>
<BR> <FONT SIZE=2 FACE="Courier New">leftsubnet=192.168.1.1/24</FONT>
<BR> <FONT SIZE=2 FACE="Courier New">leftrsasigkey=0sAQN8O4IdR8iTX7C5r38mkS/Lgy3UbkuirD624dei/HbmfrhanH4fwIdNGZu++IbfC5lr1fJH5+XVhAI5yYljj6I1KW+p+X3y+qL78jiWCJAfQhSdePqrP1uvTOFJ89RcFCn8gQexcGSr2cq2hFW7Bny8+L1Az/YxEskhNO47dDoRn739WtrYS3eE/B/NJyFrucrZf8wtKm7FF2cOIknWJ1s4YlRvXZ1kokvDa3gPAugL9I1KGJ8KuFKR0p1gdwWXWfWVPDktpSVV6MxmyDt2IYJSWBrLzDEFEI9OgB9R4PWgC38w5bf7uxkJXxC+K47EX9yr1F5JMWbh4jvefStlQSKY2SgygQ6BO/Ua70MoIAxyy76N</FONT></P>
<P><FONT SIZE=2 FACE="Courier New"> rightnexthop=%defaultroute</FONT>
<BR><FONT SIZE=2 FACE="Courier New"> right=192.168.1.100</FONT>
<BR> <FONT SIZE=2 FACE="Courier New">rightid=@left.com</FONT>
<BR> <FONT SIZE=2 FACE="Courier New">rightrsasigkey=0sAQOE4rLjh9bL3szKqCwxSoHT84l+jGbfPcUfNs9BDL2UAwEITq1MVmHIQHwo2UX8aQ5ObSnDQYVODwf5gYIGzmShqpt0FEFN8ewYIdxkPvcSLiC5AgLsGBO0Lu4o2A4VOx6btaiTygcFtpyrvNGdpWFJiLe5TeExV+TaaxS8Uq3x4b/3FUsFsH3AfS3CN7qnKeCpZN54y3qOBzxxmQNKR/scV5pLIQr60FFOG1O5GYqhFAZR9gTIC998V5USMz0LpB6aNir7avE5dTdWcypunyZFWPDyZXyDt6gtNgaX/1G+b1yCKGOGZD+5pIdOBnzp1wArmo+Rmvuw9ifisM/DI6rT8tEI0ZgcxsV5RR6tLlaOg3dd</FONT></P>
<P> <FONT SIZE=2 FACE="Courier New">auto=add</FONT>
</P>
</BODY>
</HTML>