<p>Hello,</p><p>I tried putting leftsourceip=192.168.11.254 and rightsourceip=10.5.1.250 and I didn't have result.</p><p>With this setting, some need to do NAT?</p><div>I tested some settings that I found in the forums but I didn't have result.</div>
<div> </div><div>Anybody could I help me?<br></div><div class="gmail_quote">2011/6/20 Renaldo Rocha <span dir="ltr"><<a href="mailto:renaldo.rocha@gmail.com">renaldo.rocha@gmail.com</a>></span><br><blockquote style="margin: 0px 0px 0px 0.8ex; padding-left: 1ex; border-left-color: rgb(204, 204, 204); border-left-width: 1px; border-left-style: solid;" class="gmail_quote">
<p>Hello everybody,</p><p>I'm trying to connect to a VPN (CISCO) for use of some services.<br>So far so good.<br> 1) The connection is established;<br>2) Since the right side of the VPN (CISCO) can ping my internal IP which is 192.168.11.254;</p>
<p>The problem is that I can't ping in the left side of the VPN (Openswan) to the right VPN(CISCO), in which IP is 10.5.1.250.</p><p>How could I solve this problem?</p><p>PS: I'm going crazy with this.</p><p>My ipsec.conf -----------------</p>
<p>conn XXXXXX<br> type=tunnel<br> authby=secret<br> #<br> left=190.128.137.X<br> leftsubnet=<a href="http://192.168.11.0/24" target="_blank">192.168.11.0/24</a><br> leftnexthop=%defaultroute<br>
#<br> right=190.128.229.X<br> rightsubnet=<a href="http://10.5.1.0/24" target="_blank">10.5.1.0/24</a><br> rightnexthop=%defaultroute<br> #<br> auth=esp<br> ike=aes256-md5<br>
esp=aes256-md5<br>
keyexchange=ike<br> pfs=yes<br> #<br> auto=start<br>------------------------------</p><p>My ifconfig ------------------</p><p><br>eth0 Link encap:Ethernet HWaddr 90:E6:BA:D6:08:DB<br> inet addr:192.168.1.254 Bcast:192.168.1.255 Mask:255.255.255.0<br>
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<br> RX packets:1282641 errors:0 dropped:0 overruns:0 frame:0<br> TX packets:2007304 errors:0 dropped:0 overruns:0 carrier:0<br> collisions:0 txqueuelen:1000<br>
RX bytes:179748133 (171.4 Mb) TX bytes:2494295896 (2378.7 Mb)<br> Interrupt:27 Base address:0x8000</p><p>eth1 Link encap:Ethernet HWaddr 00:04:75:DF:47:A7<br> inet addr:190.128.137.X Bcast:190.128.137.7 Mask:255.255.255.252<br>
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<br> RX packets:1914556 errors:0 dropped:0 overruns:1 frame:0<br> TX packets:1535461 errors:0 dropped:0 overruns:0 carrier:0<br> collisions:0 txqueuelen:1000<br>
RX bytes:2257486193 (2152.9 Mb) TX bytes:337062517 (321.4 Mb)<br> Interrupt:16 Base address:0xcc00</p><p>eth1:0 Link encap:Ethernet HWaddr 00:04:75:DF:47:A7<br> inet addr:192.168.11.0 Bcast:192.168.11.255 Mask:255.255.255.0<br>
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1<br> Interrupt:16 Base address:0xcc00</p><p>lo Link encap:Local Loopback<br> inet addr:127.0.0.1 Mask:255.0.0.0<br> UP LOOPBACK RUNNING MTU:16436 Metric:1<br>
RX packets:150661 errors:0 dropped:0 overruns:0 frame:0<br> TX packets:150661 errors:0 dropped:0 overruns:0 carrier:0<br> collisions:0 txqueuelen:0<br> RX bytes:113297829 (108.0 Mb) TX bytes:113297829 (108.0 Mb)</p>
<p>--------------------------------------------------</p><p>My ipsec auto --status ----------------------</p><p>000 #49: "XXXXXX":500 STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 1651s; newest ISAKMP; lastdpd=-1s(seq in:0 out:0); idle; import:admin initiate<br>
000</p><p>--------------------------------------------------</p><p>-- <br><font color="#888888">Ass..: Renaldo Rocha<br>msn..: <a href="mailto:renaldo.rocha@gmail.com" target="_blank">renaldo.rocha@gmail.com</a><br>skype: renaldo.rocha</font></p>
</blockquote></div><br><br clear="all"><br>-- <br>Ass..: Renaldo Rocha<br>msn..: <a href="mailto:renaldo.rocha@gmail.com">renaldo.rocha@gmail.com</a><br>skype: renaldo.rocha<br>