<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7652.24">
<TITLE>RE: error connecting to pix (Richard Witt)</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>On Tue, 2008-04-15 at 19:00 -0400, users-request@openswan.org wrote:<BR>
<BR>
Below is the openswan config relative to this connection:<BR>
<BR>
<BR>
conn someother_company<BR>
leftid=xxx.xxx.180.242<BR>
leftsubnet=10.64.98.0/24<BR>
right=xxx.xxx.137.116<BR>
rightsubnet=192.168.40.0/24<BR>
authby=secret<BR>
auto=start<BR>
pfs=no<BR>
ike=3des-md5-modp1024<BR>
esp=3des-md5<BR>
<BR>
<BR>
And below is the relevant config from the pix<BR>
<BR>
<BR>
access-list COMPANY extended permit ip 10.64.98.0 255.255.255.0<BR>
192.168.40.0 255.255.255.0<BR>
<BR>
<BR>
<BR>
Reverse access list company. The pix access list for encryption should<BR>
be<BR>
<BR>
access-list COMPANY extended permit 192.168.40.0 255.255.255.0<BR>
10.64.98.0<BR>
<BR>
<BR>
</FONT>
</P>
</BODY>
</HTML>