<div dir="ltr">Hello,<br><br>With the release of openswan-2.6.14 on RHEL5 I have converted a couple of my boxes to use it instead of racoon.<br><br>Unfortunately I have had zero luck in getting openswan to connect a tunnel to racoon on a RHEL4 box. Openswan receives notification that no proposal was accepted while racoon says:<br>
<br>Jul 15 22:39:28 hydrogen racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-02<br>Jul 15 22:39:28 hydrogen racoon: INFO: ISAKMP-SA established A.A.A.A[500]-B.B.B.B[500] spi:cfa1fcf5e06c7a27:2f6faeb747e5944b<br>
Jul 15 22:39:28 hydrogen racoon: INFO: respond new phase 2 negotiation: A.A.A.A[0]<=>B.B.B.B[0]<br>Jul 15 22:39:28 hydrogen racoon: ERROR: not matched<br>Jul 15 22:39:28 hydrogen racoon: ERROR: no suitable policy found.<br>
Jul 15 22:39:28 hydrogen racoon: ERROR: failed to pre-process packet.<br><br><br>setkey on openswan says:<br><br><a href="http://172.16.0.0/24[any]">172.16.0.0/24[any]</a> <a href="http://192.168.40.0/24[any]">192.168.40.0/24[any]</a> any<br>
out prio high + 1073739480 ipsec<br> esp/transport//require<br> created: Jul 16 02:45:12 2008 lastused:<br> lifetime: 0(s) validtime: 0(s)<br> spid=5193 seq=14 pid=9375<br> refcnt=1<br>
<br>While on racoon box it says:<br><br><a href="http://192.168.40.0/24[any]">192.168.40.0/24[any]</a> <a href="http://172.16.0.0/24[any]">172.16.0.0/24[any]</a> any<br> out ipsec<br> esp/tunnel/A.A.A.A-B.B.B.B/require<br>
ah/tunnel/A.A.A.A-B.B.B.B/require<br> created: Jul 15 20:44:29 2008 lastused:<br> lifetime: 0(s) validtime: 0(s)<br> spid=785 seq=20 pid=13338<br> refcnt=1<br><br><a href="http://172.16.0.0/24[any]">172.16.0.0/24[any]</a> <a href="http://192.168.40.0/24[any]">192.168.40.0/24[any]</a> any<br>
fwd ipsec<br> esp/tunnel/B.B.B.B-A.A.A.A/require<br> ah/tunnel/B.B.B.B-A.A.A.A/require<br> created: Jul 15 20:44:29 2008 lastused:<br> lifetime: 0(s) validtime: 0(s)<br> spid=802 seq=16 pid=13338<br>
refcnt=1<br><br></div>