Hi all,<br><br>I have installed kernel 2.6.24.7 + klips patch + openswan 2.6.18<br>I have made a net-to-net config. The connection start but I cannot<br>ping the end of the tunnel.<br><br>ping 192.168.23.1 -I eth1 not working<br>
ping 192.168.10.254 -I eth1 not working<br><br>ping 192.168.10.254 -I eth1<br>PING 192.168.10.254 (192.168.10.254) from 192.168.23.1 eth1: 56(84) bytes of data.<br>From 192.168.23.1 icmp_seq=2 Destination Host Unreachable<br>
>From 192.168.23.1 icmp_seq=3 Destination Host Unreachable<br>From 192.168.23.1 icmp_seq=4 Destination Host Unreachable<br><br><br>A config(and same config to B but different ipsec.secrets)<br><br>version 2.0<br><br>config setup<br>
interfaces="ipsec0=eth0"<br> protostack=klips<br><br>conn block<br> auto=ignore<br><br>conn private<br> auto=ignore<br><br>conn private-or-clear<br> auto=ignore<br><br>conn clear-or-private<br> auto=ignore<br>
<br>conn clear<br> auto=ignore<br><br>conn packetdefault<br> auto=ignore<br><br>conn A-B<br> left=WAN_IP_FROM_A<br> leftnexthop=GATEWAY_FROM_A<br> leftsubnet=<a href="http://192.168.10.0/24">192.168.10.0/24</a><br>
right=WAN_IP_FROM_B<br> rightnexthop=GATEWAY_FROM_B<br> rightsubnet=<a href="http://192.168.23.0/24">192.168.23.0/24</a><br> type=tunnel<br> auth=esp<br> leftrsasigkey=0sAQOY...<br> rightrsasigkey=0sAQNqB...<br>
auto=start<br><br>in /var/log/syslog I have:<br> Jan 7 19:13:12 vpn ipsec_setup: Starting Openswan IPsec 2.6.18...<br> Jan 7 19:13:12 vpn ipsec__plutorun: 002 added connection description "A-B" <br> Jan 7 19:13:12 vpn ipsec__plutorun: 104 "A-B" #1: STATE_MAIN_I1: initiate<br>
<br>in /var/log.secure I have:<br>Jan 7 19:15:57 vpn pluto[10094]: "A-B" #1: STATE_MAIN_I2: sent MI2, expecting MR2<br>Jan 7 19:15:57 vpn pluto[10094]: "A-B" #1: transition from state STATE_MAIN_I2 to state STATE_MAIN_I3<br>
Jan 7 19:15:57 vpn pluto[10094]: "A-B" #1: STATE_MAIN_I3: sent MI3, expecting MR3<br>Jan 7 19:15:57 vpn pluto[10094]: "A-B" #1: received Vendor ID payload [CAN-IKEv2]<br>Jan 7 19:15:57 vpn pluto[10094]: "A-B" #1: Main mode peer ID is ID_IPV4_ADDR: '82.79.83.23'<br>
Jan 7 19:15:57 vpn pluto[10094]: "A-B" #1: transition from state STATE_MAIN_I3 to state STATE_MAIN_I4<br>Jan 7 19:15:57 vpn pluto[10094]: "A-B" #1: STATE_MAIN_I4: ISAKMP SA established {auth=OAKLEY_RSA_SIG cipher=aes_128 prf=oakley_sha group=modp2048}<br>
Jan 7 19:15:57 vpn pluto[10094]: "A-B" #2: initiating Quick Mode RSASIG+ENCRYPT+TUNNEL+PFS+UP+IKEv2ALLOW {using isakmp#1 msgid:beed36ed proposal=defaults pfsgroup=OAKLEY_GROUP_MODP2048}<br>Jan 7 19:15:57 vpn pluto[10094]: "A-B" #2: transition from state STATE_QUICK_I1 to state STATE_QUICK_I2<br>
Jan 7 19:15:57 vpn pluto[10094]: "A-B" #2: STATE_QUICK_I2: sent QI2, IPsec SA established tunnel mode {ESP=>0x45d84918 <0x892b2f5a xfrm=AES_128-HMAC_SHA1 NATOA=none NATD=none DPD=none}<br>Jan 7 19:16:16 vpn pluto[10094]: "A-B" #1: ignoring Delete SA payload: PROTO_IPSEC_ESP SA(0x45d84917) not found (maybe expired)<br>
Jan 7 19:16:16 vpn pluto[10094]: "A-B" #1: received and ignored informational message<br><br><br>Thx for Help.<br><br>--<br>TC<br>