<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
--></style>
</head>
<body class='hmmessage'>
Vladimir ,<br> Which version of openswan are you using in this setup ? Please copy the complete ipsec.conf file , ipsec.secrets file , the output of "ipsec verify" command and output from "ip a" command from both vpn concentrators.<br> Thanks .<br><br><span style="font-family: Tahoma,Helvetica,Sans-Serif; font-style: italic; font-weight: bold;">-<span style="font-family: Times New Roman,Times,Serif;"> Simon Charles - </span></span><br><br><br><br><br>> Date: Sat, 3 Oct 2009 13:29:04 +0200<br>> From: mozillaner@gmail.com<br>> To: users@openswan.org<br>> Subject: [Openswan Users] IPSec Host to Host over Internet Tunnel Configuration<br>> <br>> Dear OpenSwan Users,<br>> <br>> I'm trying for some time to establish an OpenSwan tunnel connection<br>> between two hosts over the Internet, but unfortunately until now<br>> without success.<br>> <br>> This is a test setup for a university project and the configuration is<br>> as follows:<br>> <br>> # Host_1 # ------------ ######### PC with two NIC's ##########<br>> ----------- INTERNET ----------- # Host_2 #<br>> 192.168.1.3 192.168.1.2 130.83.239.102 130.83.239.101<br>> <br>> <br>> The router function on the PC is activated. The secure tunnel<br>> connection must be established between the Host_1 in a private network<br>> and Host_2 on the Internet.<br>> <br>> The ipsec.conf files are as follows:<br>> <br>> #Host_1 ipsec.conf<br>> conn Host_1_to_Host_2<br>> left=192.168.1.3<br>> leftnexthop=192.168.1.2<br>> right=130.83.239.101<br>> presharedkey=secret<br>> network=lan<br>> auto=start<br>> authmode=SHA1<br>> pfs=yes<br>> type=tunnel<br>> <br>> #Host_2 ipsec.conf<br>> conn Host_2_to_Host_1<br>> left=130.83.239.101<br>> right=192.168.1.3<br>> rightnexthop=130.83.239.102<br>> presharedkey=secret<br>> network=lan<br>> auto=start<br>> authmode=SHA1<br>> pfs=yes<br>> type=tunnel<br>> <br>> If I try to ping the Host_2 from Host_1 I'll get always the message<br>> "IP security is being negotiated". The ping from Host_2 to Host_1<br>> fails with "Request timed out.".<br>> <br>> Are the config files correct?<br>> <br>> What is wrong in my configuration above?<br>> <br>> Thanks,<br>> Vladimir<br>> _______________________________________________<br>> Users@openswan.org<br>> http://lists.openswan.org/mailman/listinfo/users<br>> Building and Integrating Virtual Private Networks with Openswan: <br>> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155<br> </body>
</html>