<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Consolas;
panose-1:2 11 6 9 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";
color:black;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
pre
{mso-style-priority:99;
mso-style-link:"HTML Vorformatiert Zchn";
margin:0cm;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";
color:black;}
span.HTMLVorformatiertZchn
{mso-style-name:"HTML Vorformatiert Zchn";
mso-style-priority:99;
mso-style-link:"HTML Vorformatiert";
font-family:Consolas;
color:black;}
span.E-MailFormatvorlage19
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body bgcolor=white lang=DE link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>What’s the config of your pix (sh ru)?<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>It should contain something like<o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span lang=EN-US
style='font-size:11.0pt;font-family:"Courier New";color:windowtext'><o:p> </o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span lang=EN-US
style='font-size:11.0pt;font-family:"Courier New";color:windowtext'>crypto
ipsec transform-set 3des-md5 esp-3des esp-md5-hmac <o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span lang=EN-US
style='font-size:11.0pt;font-family:"Courier New";color:windowtext'><o:p> </o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span lang=EN-US
style='font-size:11.0pt;font-family:"Courier New";color:windowtext'>crypto map
vpn 11 ipsec-isakmp<o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span lang=EN-US
style='font-size:11.0pt;font-family:"Courier New";color:windowtext'>crypto map
vpn 11 match address xxx<o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span lang=EN-US
style='font-size:11.0pt;font-family:"Courier New";color:windowtext'>crypto map
vpn 11 set peer x.x.x.x<o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span lang=EN-US
style='font-size:11.0pt;font-family:"Courier New";color:windowtext'>crypto map
vpn 11 set transform-set 3des-md5 <o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span lang=EN-US
style='font-size:11.0pt;font-family:"Courier New";color:windowtext'>crypto map
vpn interface outside<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Courier New";
color:windowtext'>isakmp key xxx address x.x.x.x netmask 255.255.255.0<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span lang=EN-US
style='font-size:11.0pt;font-family:"Courier New";color:windowtext'>isakmp
policy 20 authentication pre-share<o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span lang=EN-US
style='font-size:11.0pt;font-family:"Courier New";color:windowtext'>isakmp
policy 20 encryption 3des<o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span lang=EN-US
style='font-size:11.0pt;font-family:"Courier New";color:windowtext'>isakmp
policy 20 hash md5<o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span lang=EN-US
style='font-size:11.0pt;font-family:"Courier New";color:windowtext'>isakmp
policy 20 group 2<o:p></o:p></span></p>
<p class=MsoNormal style='text-autospace:none'><span style='font-size:11.0pt;
font-family:"Courier New";color:windowtext'>isakmp policy 20 lifetime 3600<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>Cheers,<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US style='font-size:11.0pt;font-family:"Calibri","sans-serif";
color:#1F497D'>ms<o:p></o:p></span></p>
<p class=MsoNormal><a name="_MailEndCompose"><span lang=EN-US style='font-size:
11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></a></p>
<div style='border:none;border-left:solid blue 1.5pt;padding:0cm 0cm 0cm 4.0pt'>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0cm 0cm 0cm'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif";
color:windowtext'>Von:</span></b><span style='font-size:10.0pt;font-family:
"Tahoma","sans-serif";color:windowtext'> users-bounces@openswan.org
[mailto:users-bounces@openswan.org] <b>Im Auftrag von </b>Avesh Agarwal<br>
<b>Gesendet:</b> Montag, 25. Januar 2010 19:25<br>
<b>An:</b> users@openswan.org<br>
<b>Betreff:</b> Re: [Openswan Users] Ubuntu - Cisco help please...<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>On 01/21/2010 03:20 PM, openwan wan wrote: <o:p></o:p></p>
<p class=MsoNormal>Hello everybody, <o:p></o:p></p>
<div>
<p class=MsoNormal>I am asking for help after spending two days to get this
working. I want to connect from my ubuntu machine having a public ip address to
couple of pcs inside a corporation. These PCs have 172.x.x.x addresses. I dont
have any subnet behind my public machine that is running OpenSwan, that is the
machine that will do the talking to the PCS and also runs the OpenSwan. Is it
possible at all? The PCs are protected by a Cisco PIX. here is my ipsec.conf
file.<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal>type= tunnel
<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal>authby= secret
<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal>#RRT
<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal> left= xx.xx.xx.xx
<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal>#leftsubnet= <a
href="http://192.168.1.0/24">192.168.1.0/24</a>
<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal>leftnexthop= %defaultroute
<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal> #SAA
<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal> right= yy.yy.yy.yy
<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal>rightsubnet= <a
href="http://172.33.15.0/24">172.33.15.0/24</a>
<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal>rightnexthop= %defaultroute
<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal>esp= 3des-md5
<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal> keyexchange= ike
<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal>pfs= no
<o:p></o:p></p>
</div>
<p class=MsoNormal><br>
Did you try pfs=yes?<br>
<br>
<o:p></o:p></p>
<div>
<p class=MsoNormal>
<o:p></o:p></p>
</div>
<div>
<p class=MsoNormal> auto= start <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><o:p> </o:p></p>
</div>
<div>
<p class=MsoNormal>The tunnel itself is nto getting established, I keep getting
Pluto error NO_PROPOSAL accepted. Any help will be appreciated. Thanks.<o:p></o:p></p>
</div>
<pre><o:p> </o:p></pre><pre><o:p> </o:p></pre><pre>_______________________________________________<o:p></o:p></pre><pre><a
href="mailto:Users@openswan.org">Users@openswan.org</a><o:p></o:p></pre><pre><a
href="http://lists.openswan.org/mailman/listinfo/users">http://lists.openswan.org/mailman/listinfo/users</a><o:p></o:p></pre><pre>Building and Integrating Virtual Private Networks with Openswan: <o:p></o:p></pre><pre><a
href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a><o:p></o:p></pre><pre> <o:p></o:p></pre>
<p class=MsoNormal><o:p> </o:p></p>
</div>
</div>
</body>
</html>