<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hi all<br>
<br>
I'm having some issues getting Openswan running on a Centos6.5 box
to connect to a Draytek router (or even another Centos box) using an
IPSec connection<br>
<br>
Here are all my settings (IP addresses have been changed - but
consistent here)<br>
1.1.1.1 - CentOS server<br>
2.2.2.2 - CentOS server bcast<br>
3.3.3.3 - router on the other end<br>
<br>
When I run an 'ipsec --up testconenction', I get the following<br>
<br>
ipsec auto --up testconnection<br>
104 "testconnection" #3: STATE_MAIN_I1: initiate<br>
010 "testconnection" #3: STATE_MAIN_I1: retransmission; will wait
20s for response<br>
010 "testconnection" #3: STATE_MAIN_I1: retransmission; will wait
40s for response<br>
<br>
The /var/log/secure file shows<br>
Feb 11 05:26:29 host pluto[31976]: | processing connection
testconnection<br>
Feb 11 05:26:29 host pluto[31976]: | handling event EVENT_RETRANSMIT
for 3.3.3.3 "testconnection" #3<br>
Feb 11 05:26:29 host pluto[31976]: | sending 592 bytes for
EVENT_RETRANSMIT through eth0:500 to 3.3.3.3:500 (using #3)<br>
<br>
Config files and outputs are below<br>
<br>
----------<br>
<b>ifconfig</b><br>
eth0 Link encap:Ethernet HWaddr 00:16:3E:38:7B:2C<br>
inet addr:1.1.1.1 Bcast:2.2.2.2 Mask:255.255.248.0<br>
<br>
-----------<br>
<b>/etc/ipsec.conf</b><br>
config setup<br>
klipsdebug=all<br>
plutodebug=all<br>
protostack=netkey<br>
nat_traversal=yes<br>
virtual_private=%v4:192.168.0.0/16,%v4:192.168.3.0/16<br>
interfaces=%defaultroute<br>
<br>
conn testconnection<br>
type=tunnel<br>
left=1.1.1.1<br>
right=3.3.3.3<br>
rightsubnet=192.168.3.0/255.255.255.0<br>
auth=esp<br>
esp=3des-168<br>
keyexchange=ike<br>
auto=start<br>
pfs=no<br>
rekey=no<br>
authby=secret<br>
<br>
----------<br>
<b>/etc/ip.secrets</b><br>
1.1.1.1 3.3.3.3: PSK "mykeyhere"<br>
<br>
----------<br>
<b>ipsec verify</b><br>
Checking your system to see if IPsec got installed and started
correctly:<br>
Version check and ipsec on-path [OK]<br>
Linux Openswan U2.6.32/K2.6.32-431.3.1.el6.x86_64 (netkey)<br>
Checking for IPsec support in kernel [OK]<br>
SAref kernel support
[N/A]<br>
NETKEY: Testing for disabled ICMP send_redirects [OK]<br>
NETKEY detected, testing for disabled ICMP accept_redirects [OK]<br>
Checking that pluto is running [OK]<br>
Pluto listening for IKE on udp 500 [OK]<br>
Pluto listening for NAT-T on udp 4500 [OK]<br>
Checking for 'ip' command [OK]<br>
Checking /bin/sh is not /bin/dash [OK]<br>
Checking for 'iptables' command [OK]<br>
<br>
----------<br>
<br>
Any help would be appreciated.<br>
<br>
Dave<br>
<br>
<br>
<br>
<br>
</body>
</html>