<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:lucida console,sans-serif;font-size:12pt"><div>Good day gents, I'm fairly new to the list, i'm really sorry if this question has been asked before, I was given a task to Interop with Cisco PIX today in tandem with 7206 router.<br><br>I'm fairly confuse as what is the real definition of rightsubnet, I'll attach here to a simple ascii diagram to demonstrate my confusion.<br><br><br>Centos 5.3 / Openswan 2.6.23<br><br><br>Linux -> 1.1.1.1 (public) -> (public) 2.2.2.2 Cisco Pix (Cisco Unity) -> unknown ip (Cisco 7206) NATed network (208.77.116.44/30)<br> |<br> |<br>Local Network (192.168.10.0/29)<br><br><br>openswan config<br><br><br>conn net-net<br><br>left = 1.1.1.1<br>leftsubnet = 192.168.10.0/29<br>leftnexthop = %defaultroute<br><br>right = 2.2.2.2<br>rightsubnet = 208.77.116.46/32<br>rightnexthop =
%defaultroute<br><br>type = tunnel<br><br>ike = 3des-md5<br>esp = 3des-md5<br>auth = esp<br>pfs = no<br>auto = start<br><br>my problem is the cisco side is having an error in quick mode the tunnel on peer 1.1.1.1<br>in openswan my error is something like this<br><br>Nov 5 08:16:08 openswan-gw pluto[31064]: "net-net" #1: ignoring
<br><br>informational payload, type NO_PROPOSAL_CHOSEN
<br> <br>I'm really sorry the system in question was done for a while, and that's the reason i can't give you the ipsec barf output.<br><br><br>I already google this up a couple of days ago, and and lead me to believe that this has something to do with subnet declaration on both side, not on a mismatch on crypto settings<br><br>For your input and guidance.<br><br><br>Best regards,<br><br>Ronaldo Chan<br></div>
<!-- cg23.c1.mail.mud.yahoo.com compressed/chunked Wed Nov 4 22:10:59 PST 2009 -->
</div><br>
</body></html>