<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style>
</head>
<body class='hmmessage'>
Hi,<br><br>I configured a net-to-net vpn with openswan, the configurations as follows:<br><br>conn net-to-net<br> connaddrfamily=ipv4<br> authby=secret<br> left=10.226.9.2<br> leftnexthop=%defaultroute<br> leftsubnet=192.168.123.0/24<br> right=10.226.9.215<br> rightnexthop=%defaultroute<br> rightsubnet=192.168.122.0/24<br> esp=3des-sha1<br> keyexchange=ike<br> ike=3des-sha1<br> pfs=no<br> auto=add<br><br>It showed I can set the net-to-net v
pn successfully, but when I couldn't reach 192.168.122.1 on the left endpoint, could you help me with this? Thanks!<br><br>104 "net-to-net" #1: STATE_MAIN_I1: initiate<br>003 "net-to-net" #1: received Vendor ID payload [Openswan (this version) 2.6.24 ]<br>003 "net-to-net" #1: received Vendor ID payload [Dead Peer Detection]<br>106 "net-to-net" #1: STATE_MAIN_I2: sent MI2, expecting MR2<br>108 "net-to-net" #1: STATE_MAIN_I3: sent MI3, expecting MR3<br>003 "net-to-net" #1: received Vendor ID payload [CAN-IKEv2]<br>004 "net-to-net" #1: STATE_MAIN_I4: ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1536}<br>117 "net-to-net" #2: STATE_QUICK_I1: initiate<br>004 "net-to-net" #2: STATE_QUICK_I2: sent QI2, IPsec SA established tunnel mode {ESP=>0x1af874bc <0x2f3ee9b4 xfrm=3DES_0-HMAC_SHA1 NATOA=none NATD=none DPD=none}<br> </body>
</html>