Hi all,<br><br>I am trying to get a simple road warrior set up working, as per the docs, with out any luck after 3 days trying.<br>My road warrior is a Debian box in an office with a dynamic IP address.<br>It has host name of <a href="http://rsm-1.rsm.fi">rsm-1.rsm.fi</a> but this is not a resolvable name.<br>
<br>My host at the other end is a virtual Debian box at a hosting provider with a fixed public IP.<br>This has no subnets behind it. It has the name <a href="http://fits-server.rsm.fi">fits-server.rsm.fi</a> that resolves.<br>
<br>My ipsec.conf looks like this:<br><br>On the road warrior in an office:<br><br>conn road<br> left=%defaultroute # Picks up our dynamic IP<br> leftid=@<a href="http://rsm-1.rsm.fi">rsm-1.rsm.fi</a> # Local information<br>
leftrsasigkey=0sAQOA59S41zh.....<br> right=194.79.19.179 # Remote information<br> rightid=@<a href="http://fits-server.rsm.fi">fits-server.rsm.fi</a> #<br> rightrsasigkey=0sAQOdTUwfyxm.....<br>
auto=add # authorizes but doesn't start this<br> # connection at startup<br><br>On my server at the hosting provider:<br><br>conn road<br> left=194.79.19.179 # Gateway's information<br>
leftid=@<a href="http://fits-server.rsm.fi">fits-server.rsm.fi</a> #<br> leftrsasigkey=0sAQOdTUwf............<br> right=%any # Wildcard: we don't know the laptop's IP<br> rightid=@<a href="http://rsm-1.rsm.fi">rsm-1.rsm.fi</a> #<br>
rightnexthop=%defaultroute # correct in many situations<br> rightrsasigkey=0sAQOA59........<br> auto=add # authorizes but doesn't start this<br> # connection at startup<br>
<br>As you see I tried to keep it as simple as possible and like the examples.<br><br>The error I now get on the server logs is:<br><br>cannot respond to IPsec SA request because no connection is known for 194.79.19.179[@<a href="http://fits-server.rsm.fi">fits-server.rsm.fi</a>]...62.237.208.66[@<a href="http://rsm-1.rsm.fi">rsm-1.rsm.fi</a>]===<a href="http://10.65.1.181/32">10.65.1.181/32</a><br>
<br>Where 62.237.208.66 is the outgoing address from this office and 10.65.1.181 is the current dynamic IP.<br><br>Thank you for any suggestions.<br><br><br><br>