<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
This looks like you have gone for the standard ClarkConnect unmanaged
VPN setup. Is that correct? If so, it will not work if it is behind a
checkpoint firewall, or is the CC box one gateway and the Checkpoint
firewall the othr VPN/gateway?<br>
<br>
If you are asked to upgrade Openswan, see this thread from the CC
forums (especially the second post):
<a class="moz-txt-link-freetext" href="http://forums.clarkconnect.com/showthreaded.php?Cat=0&Number=98437&page=0">http://forums.clarkconnect.com/showthreaded.php?Cat=0&Number=98437&page=0</a>.
It tells you how to edit the makefile.inc. You will also need to do the
following (as CC5 now uses yum and not apt):<br>
<br>
yum groupinstall "Development Tools"<br>
yum install xmlto<br>
<br>
If you end up setting up openswan by hand, you will break the GUI
interface, but it will work.<br>
<br>
Nick<br>
<br>
On 24/08/2009 20:55, Estevao Arndt wrote:
<blockquote
cite="mid:F371A2196BD1F54E8CF3EF8414A3E279016462B7@lckms01.afbrasil.local"
type="cite">
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
<meta name="GENERATOR" content="MSHTML 8.00.6001.18783">
<div><font face="Tahoma" size="2"><span class="414304919-24082009">Hello,</span></font></div>
<div><font face="Tahoma" size="2"><span class="414304919-24082009">I
am trying to do a VPN between our office and the HeadOffice, but I can
not get connected.</span></font></div>
<div><font face="Tahoma" size="2"><span class="414304919-24082009"></span></font> </div>
<div><font face="Tahoma" size="2"><span class="414304919-24082009">I
have this message:</span></font></div>
<div><font face="Tahoma" size="2"><span class="414304919-24082009">[root@locktonbrasil
etc]# ipsec auto --up hqnetBrasil-satnetBrasil<br>
104 "hqnetBrasil-satnetBrasil" #10: STATE_MAIN_I1: initiate<br>
010 "hqnetBrasil-satnetBrasil" #10: STATE_MAIN_I1: retransmission; will
wait 20s for response<br>
010 "hqnetBrasil-satnetBrasil" #10: STATE_MAIN_I1: retransmission; will
wait 40s for response<br>
031 "hqnetBrasil-satnetBrasil" #10: max number of retransmissions (2)
reached STATE_MAIN_I1. No response (or no acceptable response) to our
first IKE message<br>
000 "hqnetBrasil-satnetBrasil" #10: starting keying attempt 2 of at
most 3, but releasing whack<br>
</span></font></div>
<div><font face="Tahoma" size="2"><span class="414304919-24082009">See
attached my ipsec.conf and ipsec.Brasil.conf. Can you help me on that?</span></font></div>
<div><span class="414304919-24082009"><font face="Tahoma" size="2">Regards.</font></span></div>
<div><font color="#008000">
</font>
<p style="margin: 0cm 0cm 0pt;" class="MsoNormal" align="left"><span
style="font-family: Tahoma; color: black; font-size: 10pt;"><span
class="414304919-24082009"><font color="#008000">Estevão Arndt.</font></span></span></p>
</div>
<pre wrap="">
<hr width="90%" size="4">
_______________________________________________
<a class="moz-txt-link-abbreviated" href="mailto:Users@openswan.org">Users@openswan.org</a>
<a class="moz-txt-link-freetext" href="http://lists.openswan.org/mailman/listinfo/users">http://lists.openswan.org/mailman/listinfo/users</a>
Building and Integrating Virtual Private Networks with Openswan:
<a class="moz-txt-link-freetext" href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a>
</pre>
</blockquote>
</body>
</html>