My network diagram is shown below.<br>
openswan gateway1<----->modem1<----> internet <-------><br>
modem2<-------->openswan gateway2<br>
IP addresses:<br>
<div class="Ih2E3d"> (1)openswan gateway1--192.168.1.102<br>
(2)modem 1 internal ip address----192.168.1.1<br>
(3)modem 1 external(static)ip address----59.90.235.34<br>
(4)modem 2 external(static)ip address----59.90.235.36<br>
(5)modem 2 internal ip address----192.168.1.1<br>
(6)openswan gateway 2--192.168.1.2<br>
</div> My ipsec.conf and ipsec.conf is given below:<br>
IPSEC.CONF<br>
-------------------<br>
version 2.0<br>
config setup<br>
interfaces="ipsec0=eth1"<br>
plutodebug=all<br>
klipsdebug=all<br>
uniqueids=yes<br>
conn testorig<br>
left=<a href="http://192.168.1.102/" target="_blank">192.168.1.102</a><br>
ike=aes128-sha-modp8192<br>
esp=aes256-sha1<br>
<br>
- Ignored:<br>
#leftsubnet=<a href="http://192.169.100.0/24" target="_blank">192.169.100.0/24</a><br>
leftnexthop=<a href="http://192.168.1.1/" target="_blank">192.168.1.1</a><br>
right=<a href="http://192.168.1.2/" target="_blank">192.168.1.2</a><br>
#rightsubnet=<a href="http://192.169.80.0/24" target="_blank">192.169.80.0/24</a><br>
rightnexthop=<a href="http://192.168.1.1/" target="_blank">192.168.1.1</a><br>
authby=secret<br>
pfs=no<br>
ikelifetime=1h<br>
keylife=1d<br>
auto=ignore<br>
compress=no<br>
rekey=no<br>
failureshunt=passthrough<br>
auth=esp<br>
<br>
include /etc/ipsec.d/examples/no_oe<div id="1eqz" class="ArwC7c ckChnd">.conf<br>
<br>
IPSEC.SECRETS<br>
--------------------------<br>
<a href="http://192.168.1.102/" target="_blank">192.168.1.102</a> <a href="http://192.168.1.2/" target="_blank">192.168.1.2</a>: PSK "secret"<br>
<br>
When i gave "up " command ,tunnel is not coming up.<br>
<br>
[root@vpn1 ~]# ipsec auto --up testorig<br>
104 "testorig" #1: STATE_MAIN_I1: initiate<br>
010 "testorig" #1: STATE_MAIN_I1: retransmission; will wait 20s for response<br>
<br>
In barf message, it is giving following error:<br>
"*ERROR: asynchronous network error report on eth1 (sport=500) for message<br>
to <a href="http://192.168.1.2/" target="_blank">192.168.1.2</a> port 500, complainant <a href="http://192.168.1.102/" target="_blank">192.168.1.102</a>: No route to host [errno<br>
113, origin ICMP type 3 code 1 (not authenticated)]"*<br>
......<br>
.....<br>
Jul 2 19:45:25 vpn1 pluto[4038]: | inserting event EVENT_RETRANSMIT,<br>
timeout in 10 seconds for #1<br>
Jul 2 19:45:25 vpn1 pluto[4038]: | next event EVENT_RETRANSMIT in 10<br>
seconds for #1<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | rejected packet:<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | f1 15 14 43 0d 09 72 48 00 00 00 00<br>
00 00 00 00<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | 01 10 02 00 00 00 00 00 00 00 00 78<br>
0d 00 00 38<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | 00 00 00 01 00 00 00 01 00 00 00 2c<br>
00 01 00 01<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | 00 00 00 24 00 01 00 00 80 0b 00 01<br>
80 0c 0e 10<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | 80 01 00 07 80 02 00 02 80 03 00 01<br>
80 04 00 12<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | 80 0e 00 80 0d 00 00 10 4f 45 4e 55<br>
7a 5e 71 5f<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | 6a 7b 61 4a 00 00 00 14 af ca d7 13<br>
68 a1 f1 c9<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | 6b 86 96 fc 77 57 01 00<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | control:<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | 18 00 00 00 00 00 00 00 08 00 00 00<br>
01 00 00 00<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | c0 a8 01 66 c0 a8 01 66 2c 00 00 00<br>
00 00 00 00<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | 0b 00 00 00 71 00 00 00 02 03 01 00<br>
00 00 00 00<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | 00 00 00 00 02 00 00 00 c0 a8 01 66<br>
00 00 00 00<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | 00 00 00 00<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | name:<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | 02 00 01 f4 c0 a8 01 02 00 00 00 00<br>
00 00 00 00<br>
Jul 2 19:45:28 vpn1 pluto[4038]: "testorig" #1: *ERROR: asynchronous<br>
network error report on eth1 (sport=500) for message to <a href="http://192.168.1.2/" target="_blank">192.168.1.2</a> port<br>
500, complainant <a href="http://192.168.1.102/" target="_blank">192.168.1.102</a>: No route to host [errno 113, origin ICMP<br>
type 3 code 1 (not authenticated)]*<br>
Jul 2 19:45:28 vpn1 pluto[4038]: | next event EVENT_RETRANSMIT in 7 seconds<br>
for #1<br>
Jul 2 19:45:35 vpn1 pluto[4038]: |<br>
Jul 2 19:45:35 vpn1 pluto[4038]: | *time t<br>
<br>
<br>
can you tell me what is the mistake in this configuration?????<br>
what to do to solve this problem???<br>
<br>
thanks in advance,<br>
Regards,<br>
Nirmala</div>