<div dir="ltr">I have been trying to setup a tunnel between Linux and a Watchguard device for some time now. <br><br>My specs:<br><br>Linux=Ubuntu Gutsy with OpenSWAN 2.4.6 (from the respositories)<br>Watchguard=Firebox running 10.2 <br>
<br>I can successfully build a Main Mode tunnel and ping across. My need is for a tunnel when I'm on the road, hence the need for Aggressive mode. If I duplicate my settings from main mode on both ends but change to use aggressive mode the tunnel times out in the build. I have a snippet below for what I think may be part of the cause, but I don't know what to make of it. <br>
<br>Aug 12 19:22:09 zp1 pluto[29197]: "watchguard-mobile" #1: initiating Aggressive Mode #1, connection "watchguard-mobile"<br>Aug 12 19:22:09 zp1 pluto[29197]: | 0: w->pcw_dead: 0 w->pcw_work: 0 cnt: 1<br>
Aug 12 19:22:09 zp1 pluto[29197]: | asking helper 0 to do build_kenonce op on seq: 1<br>Aug 12 19:22:09 zp1 pluto[29197]: | inserting event EVENT_CRYPTO_FAILED, timeout in 300 seconds for #1<br>Aug 12 19:22:09 zp1 pluto[29234]: ! helper -1 doing build_kenonce op id: 1<br>
Aug 12 19:22:09 zp1 pluto[29197]: | next event EVENT_PENDING_PHASE2 in 113 seconds<br><br>Here's my ipsec.conf:<br><br>config setup<br> plutodebug="all"<br> klipsdebug="all"<br> #nhelpers=0<br>
#nocrsend=yes<br> #uniqueids=yes<br> #nat_traversal=yes<br><br># Add connections here<br><br>conn watchguard-mobile<br> type=tunnel<br> left=%defaultroute<br> leftid=<a href="http://mobile.mydomain.com">mobile.mydomain.com</a><br>
right=<external IP><br> rightid=<ID><br> rightsubnet=<right subnet><br> keyexchange=ike<br> pfs=no<br> aggrmode=yes<br> auto=add<br> auth=esp<br> ike=3des-sha1-modp1024<br> esp=3des-sha1<br> authby=secret<br>
modecfgpull=no<br> compress=no<br> keyingtries=%forever<br><br><br>#Disable Opportunistic Encryption<br>include /etc/ipsec.d/examples/no_oe.conf<br><br><br>In my main mode config, I have NAT-T enabled because I'm behind a firewall. For my mobile config, I'm using an cellular aircard, so NAT-T is disabled on both ends. <br>
<br>ANY assistance would be appreciated!<br><br><br><br></div>