<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Hi all. I am hoping someone on this list might be able to lend a hand.<div><br></div><div>This is a simple VPN setup ;</div><div><br></div><div><div>conn myvpnconn</div><div> authby=secret</div><div> auto=start</div><div><span style="font-size: 12pt;"> type=tunnel</span></div><div> aggrmode=no</div><div> left=10.1.1.1</div><div> leftid=<NAT'd PUBLIC IP></div><div> leftsubnet=10.1.1.0/24</div><div><span style="font-size: 12pt;"> leftnexthop=%defaultroute</span></div><div><br></div><div> right=A.B.C.1 - this is a public IP</div><div> rightid=A.B.C.1 - this subnet is the same net as right is on</div><div><span style="font-size: 12pt;"> rightsubnet=A.B.C.0/24</span></div><div> ike=aes128-sha1;modp1024</div><div> ikelifetime=480m</div><div> phase2=esp</div><div> phase2alg=aes128-sha1;modp1024</div><div> salifetime=3600s</div><div> pfs=yes</div><div> forceencaps=no</div></div><div><br></div><div>The error (or problem) I am experiencing is that the tunnel is never getting past Phase1</div><div><br></div><div>500 STATE_MAIN_I1 (sent MI1, expecting MR1); EVENT_RETRANSMIT </div><div><br></div><div>I suspect the issue is that the right is a public IP on the same subnet as the rightsubnet itself. If I am correct, I believe the solution is to use iptables on the left openswan to NAT/Masquerade the traffic to the right server so it does not get confused between internet traffic and encrypted traffic?? Does that make sense? Has anyone dealt with a similar setup?</div> </div></body>
</html>