<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
</style>
</head>
<body class='hmmessage'>
Hi !<br> From the ipsec.conf file it seems that your left and right are mixed up. This is what i gather from the ipsec.conf file<br> <br>"rightid=-the local FQDN on the router-" - so you are using right as the "local network"<br>"leftid=-the remote FQDN on the router-" and left as "remote network"<br><br>Since left is "remote network for you" -- hence<br>"left=%defaultroute" -- should actually be "left={ip addr of the left device}". Assigning the "%defaultroute" would be true only for local network.<br><br>Try "ipsec auto --status" to find out if the configuration "firstTry" is loaded into running configuration. If its not - then there is problem in your conn definition and the reason why "ipsec auto --up firstTry" gives you "no connection found" error.<br> <br><br><span style="font-family: Tahoma,Helvetica,Sans-Serif; font-style: italic; font-weight: bold;">-<span style="font-family: Times New Roman,Times,Serif;"> Simon Charles - </span></span><br><br><br><br><br><hr id="stopSpelling">Date: Thu, 12 Mar 2009 00:06:49 -0700<br>From: sullivan@mayachitra.com<br>To: users@openswan.org<br>Subject: [Openswan Users] Can't find conn<br><br>Hi. I have, hopefully, an easy question. I'm trying to connect to my work's netgear VPN. From the wiki I've hopefully set up my ipsec.conf, and I wanted to give it a try, but trying the tutorial "ipsec auto --up connection-name":<br><br>$ sudo ipsec auto --up firstTry<br>021 no connection named "firstTry"<br><br>but I thought I set it up such that there was a connection called firstTry:<br><br>$ more /etc/ipsec.conf<br># right: remote<br># left: local<br><br>version 2<br>config setup<br> plutodebug=none<br> plutostderrlog=/root/.kde/share/apps/kvpnc/ipsec.mciWizTry.log<br><br>conn firstTry<br> authby=secret<br> type=tunnel<br> <br> auto=start<br> pfs=no<br> aggrmode=yes<br> keyexchange=ike<br> ike=3des-sha1-modp1024<br> esp=3des-sha1<br>
left=%defaultroute<br> right=-work ip-<br> leftid=-the remote FQDN on the router-<br> rightid=-the local FQDN on the router-<br> leftsubnet=192.168.7.0/24<br> rightsubnet=192.168.9.0/24<br><br>What am I doing wrong? <br><br>Also if anything in the .conf file looks wrong, it probably is, so feel free to criticize.<br><br></body>
</html>