<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
</head>
<body bgcolor="#ffffff" text="#000000">
Hi<br>
<br>
Env:<br>
203.194.231.42 (redhat) <---> 203.166.672.230 (ciscovpn) ---
10.30.20.0/24<br>
<br>
/etc/ipsec.conf<br>
conn hosttohost<br>
left=203.194.231.42<br>
leftsubnet=203.194.231.42/32<br>
right=203.166.672.23<br>
rightsubnet=10.30.20.0/24<br>
type=tunnel<br>
auto=add<br>
auth=esp<br>
pfs=no<br>
authby=secret<br>
ikelifetime=8h<br>
esp=3des-md5-168<br>
<br>
<br>
Problem:<br>
VPN established<br>
But unable to ping 10.30.20.x<br>
<br>
<br>
I found something under /var/log/secure, which showed the redhat IP
with wrong subnet.<br>
<i><b><br>
Dec 14 20:57:55 cpweb pluto[22475]: "hosttohost" #4: cannot respond to
IPsec SA request because no connection is known for
203.194.231.43/32===203.194.231.42...203.166.672.230===10.30.20.0/24<br>
<br>
</b></i>I have tried to correct by <code>"ipsec auto --add </code>hosttohost<code>"</code>
command, according to the page, but the result remains unchange.<br>
<a class="moz-txt-link-freetext" href="http://wiki.openswan.org/index.php/Openswan/FAQ#a87">http://wiki.openswan.org/index.php/Openswan/FAQ#a87</a><br>
<br>
Anyone has idea?<br>
<br>
Thanks<br>
<br>
Yip<br>
<br>
<br>
</body>
</html>