Hello, thanks for the fast answer.<br><br><span id="result_box" class="" lang="en"><span title="Clique para mostrar traduções alternativas" class="hps">I tried</span> <span title="Clique para mostrar traduções alternativas" class="hps">putting</span> <span title="Clique para mostrar traduções alternativas" class="hps">leftsourceip</span>=192.168.11.254 and <span title="Clique para mostrar traduções alternativas" class="hps">rightsourceip=</span><span title="Clique para mostrar traduções alternativas" class="hps">10.5.1.250</span> <span title="Clique para mostrar traduções alternativas" class="hps">and</span> <span title="Clique para mostrar traduções alternativas" class="hps">I didn't have</span> <span title="Clique para mostrar traduções alternativas" class="hps">result.</span></span><br>
<br>With this setting, some need to do NAT?<br><br>PS: <span id="result_box" class="" lang="en"><span title="Clique para mostrar traduções alternativas" class="hps">I'm testing</span> <span title="Clique para mostrar traduções alternativas" class="hps">the ping</span> <span title="Clique para mostrar traduções alternativas" class="hps">directly from the</span> <span title="Clique para mostrar traduções alternativas" class="hps">VPN server</span> <span title="Clique para mostrar traduções alternativas" class="hps atn">(</span><span class="" title="Clique para mostrar traduções alternativas">openswan</span><span class="" title="Clique para mostrar traduções alternativas">).</span></span><br>
<br><div class="gmail_quote">2011/6/21 Nick Howitt <span dir="ltr"><<a href="mailto:n1ck.h0w1tt@gmail.com">n1ck.h0w1tt@gmail.com</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
Renaldo,<br>
<br>
Add leftsourceip=192.168.11.254 to your ipsec.conf.<br>
<br>
Regards,<br><font color="#888888">
<br>
Nick</font><div><div></div><div class="h5"><br>
<br>
Quoting "Renaldo Rocha" <<a href="mailto:renaldo.rocha@gmail.com" target="_blank">renaldo.rocha@gmail.com</a>>:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hello everybody,<br>
<br>
I'm trying to connect to a VPN (CISCO) for use of some services.<br>
So far so good.<br>
1) The connection is established;<br>
2) Since the right side of the VPN (CISCO) can ping my internal IP which is<br>
192.168.11.254;<br>
<br>
The problem is that I can't ping in the left side of the VPN (Openswan) to<br>
the right VPN(CISCO), in which IP is 10.5.1.250.<br>
<br>
How could I solve this problem?<br>
<br>
PS: I'm going crazy with this.<br>
<br>
My ipsec.conf -----------------<br>
<br>
conn XXXXXX<br>
type=tunnel<br>
authby=secret<br>
#<br>
left=190.128.137.X<br>
leftsubnet=<a href="http://192.168.11.0/24" target="_blank">192.168.11.0/24</a><br>
leftnexthop=%defaultroute<br>
#<br>
right=190.128.229.X<br>
rightsubnet=<a href="http://10.5.1.0/24" target="_blank">10.5.1.0/24</a><br>
rightnexthop=%defaultroute<br>
#<br>
auth=esp<br>
ike=aes256-md5<br>
esp=aes256-md5<br>
keyexchange=ike<br>
pfs=yes<br>
#<br>
auto=start<br>
------------------------------<br>
<br>
My ifconfig ------------------<br>
<br>
<br>
eth0 Link encap:Ethernet HWaddr 90:E6:BA:D6:08:DB<br>
inet addr:192.168.1.254 Bcast:192.168.1.255 Mask:255.255.255.0<br>
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<br>
RX packets:1282641 errors:0 dropped:0 overruns:0 frame:0<br>
TX packets:2007304 errors:0 dropped:0 overruns:0 carrier:0<br>
collisions:0 txqueuelen:1000<br>
RX bytes:179748133 (171.4 Mb) TX bytes:2494295896 (2378.7 Mb)<br>
Interrupt:27 Base address:0x8000<br>
<br>
eth1 Link encap:Ethernet HWaddr 00:04:75:DF:47:A7<br>
inet addr:190.128.137.X Bcast:190.128.137.7 Mask:255.255.255.252<br>
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<br>
RX packets:1914556 errors:0 dropped:0 overruns:1 frame:0<br>
TX packets:1535461 errors:0 dropped:0 overruns:0 carrier:0<br>
collisions:0 txqueuelen:1000<br>
RX bytes:2257486193 (2152.9 Mb) TX bytes:337062517 (321.4 Mb)<br>
Interrupt:16 Base address:0xcc00<br>
<br>
eth1:0 Link encap:Ethernet HWaddr 00:04:75:DF:47:A7<br>
inet addr:192.168.11.0 Bcast:192.168.11.255 Mask:255.255.255.0<br>
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<br>
Interrupt:16 Base address:0xcc00<br>
<br>
lo Link encap:Local Loopback<br>
inet addr:127.0.0.1 Mask:255.0.0.0<br>
UP LOOPBACK RUNNING MTU:16436 Metric:1<br>
RX packets:150661 errors:0 dropped:0 overruns:0 frame:0<br>
TX packets:150661 errors:0 dropped:0 overruns:0 carrier:0<br>
collisions:0 txqueuelen:0<br>
RX bytes:113297829 (108.0 Mb) TX bytes:113297829 (108.0 Mb)<br>
<br>
------------------------------<u></u>--------------------<br>
<br>
My ipsec auto --status ----------------------<br>
<br>
000 #49: "XXXXXX":500 STATE_MAIN_I4 (ISAKMP SA established);<br>
EVENT_SA_REPLACE in 1651s; newest ISAKMP; lastdpd=-1s(seq in:0 out:0); idle;<br>
import:admin initiate<br>
000<br>
<br>
------------------------------<u></u>--------------------<br>
<br>
--<br>
Ass..: Renaldo Rocha<br>
msn..: <a href="mailto:renaldo.rocha@gmail.com" target="_blank">renaldo.rocha@gmail.com</a><br>
skype: renaldo.rocha<br>
<br>
</blockquote>
<br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Ass..: Renaldo Rocha<br>msn..: <a href="mailto:renaldo.rocha@gmail.com">renaldo.rocha@gmail.com</a><br>skype: renaldo.rocha<br>
<div style="visibility: hidden; left: -5000px; position: absolute; z-index: 9999; padding: 0px; margin-left: 0px; margin-top: 0px; overflow: hidden; word-wrap: break-word; color: black; font-size: 10px; text-align: left; line-height: 130%;" id="avg_ls_inline_popup">
</div>