<div dir="ltr"><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">Hi, all</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">I did step by step to let openswan work in site-to-site mode, but tried several times, still, it couldn't work properly.</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">The following is my environment:</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">10.1.120.2(subnet:<a href="http://10.1.120.0/24)--192.168.1.120----swith----192.168.1.121--10.1.121.2(subnet:10.1.121.0/24">10.1.120.0/24)--192.168.1.120----swith----192.168.1.121--10.1.121.2(subnet:10.1.121.0/24</a>)</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">PC-A VPN-Server-A VPN-Server-B PC-B </div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">=======================</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">(VPN-Server-B && VPN-Server-A)</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">#ipsec verify</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)"><br></div><div><div class="gmail_default" style><span style="color:rgb(0,0,255);font-family:verdana,sans-serif;font-size:small"></span><font color="#0000ff" face="verdana, sans-serif">Checking your system to see if IPsec got installed and started correctly:</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif">Version check and ipsec on-path <span class="" style="white-space:pre"> </span>[OK]</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif">Linux Openswan U2.6.32/K2.6.32-431.29.2.el6.x86_64 (netkey)</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif">Checking for IPsec support in kernel <span class="" style="white-space:pre"> </span>[OK]</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif"> SAref kernel support <span class="" style="white-space:pre"> </span>[N/A]</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif"> NETKEY: Testing for disabled ICMP send_redirects <span class="" style="white-space:pre"> </span>[OK]</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif">NETKEY detected, testing for disabled ICMP accept_redirects <span class="" style="white-space:pre"> </span>[OK]</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif">Testing against enforced SElinux mode <span class="" style="white-space:pre"> </span>[OK]</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif">Checking that pluto is running <span class="" style="white-space:pre"> </span>[OK]</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif"> Pluto listening for IKE on udp 500 <span class="" style="white-space:pre"> </span>[OK]</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif"> Pluto listening for NAT-T on udp 4500 <span class="" style="white-space:pre"> </span>[OK]</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif">Two or more interfaces found, checking IP forwarding <span class="" style="white-space:pre"> </span>[OK]</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif">Checking NAT and MASQUERADEing <span class="" style="white-space:pre"> </span>[OK]</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif">Checking for 'ip' command <span class="" style="white-space:pre"> </span>[OK]</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif">Checking /bin/sh is not /bin/dash <span class="" style="white-space:pre"> </span>[OK]</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif">Checking for 'iptables' command <span class="" style="white-space:pre"> </span>[OK]</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif">Opportunistic Encryption Support <span class="" style="white-space:pre"> </span>[DISABLED]</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif"><br></font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif">(</font><span style="color:rgb(0,0,255);font-family:verdana,sans-serif">VPN-Server-B</span><span style="color:rgb(0,0,255);font-family:verdana,sans-serif">)</span></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">#cat /etc/ipsec.conf</div><div class="gmail_default" style><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif">version<span class="" style="white-space:pre"> </span>2.0</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif">config setup</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif"><span class="" style="white-space:pre"> </span>klipsdebug=all</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif"><span class="" style="white-space:pre"> </span>plutodebug=all</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif"><span class="" style="white-space:pre"> </span>protostack=netkey</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif"><span class="" style="white-space:pre"> </span>nat_traversal=yes</font></div><div class="gmail_default" style><font color="#0000ff" face="verdana, sans-serif"><span class="" style="white-space:pre"> </span>oe=off</font></div></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">conn secgw-vpn</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> authby=secret</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> auto=start</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> ike=3des-sha1</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> keyexchange=ike</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> auth=esp</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> pfs=no</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> type=tunnel</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> left=192.168.1.121</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> leftnexthop=%defaultroute</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> leftsubnet=<a href="http://10.1.121.0/24">10.1.121.0/24</a></div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> right=192.168.1.120</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"><span class="" style="white-space:pre"> </span>rightnexthop=%defaultroute</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)"> rightsubnet=<a href="http://10.1.120.0/24">10.1.120.0/24</a></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)"><div class="gmail_default" style="color:rgb(34,34,34);font-family:arial,sans-serif"><font color="#0000ff" face="verdana, sans-serif">(</font><span style="color:rgb(0,0,255);font-family:verdana,sans-serif">VPN-Server-A</span><span style="color:rgb(0,0,255);font-family:verdana,sans-serif">)</span></div><div class="gmail_default">#cat /etc/ipsec.conf</div></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">version<span class="" style="white-space:pre"> </span>2.0</div><div class="gmail_default"><font color="#0000ff" face="verdana, sans-serif">config setup</font></div><div class="gmail_default"><font color="#0000ff" face="verdana, sans-serif"><span class="" style="white-space:pre"> </span>klipsdebug=all</font></div><div class="gmail_default"><font color="#0000ff" face="verdana, sans-serif"><span class="" style="white-space:pre"> </span>plutodebug=all</font></div><div class="gmail_default"><font color="#0000ff" face="verdana, sans-serif"><span class="" style="white-space:pre"> </span>protostack=netkey</font></div><div class="gmail_default"><font color="#0000ff" face="verdana, sans-serif"><span class="" style="white-space:pre"> </span>nat_traversal=yes</font></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)"><span class="" style="white-space:pre"> </span>oe=off</div></div><div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">conn secgw-vpn</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"><span class="" style="white-space:pre"> </span>authby=secret</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"><span class="" style="white-space:pre"> </span>auto=start</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"><span class="" style="white-space:pre"> </span>ike=3des-sha1</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> keyexchange=ike</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> auth=esp</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> pfs=no</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> type=tunnel</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> left=192.168.1.120</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> leftnexthop=%defaultroute</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> leftsubnet=<a href="http://10.1.120.0/24">10.1.120.0/24</a></div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"> right=192.168.1.121</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)"><span class="" style="white-space:pre"> </span>rightnexthop=%defaultroute</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)"> rightsubnet=<a href="http://10.1.121.0/24">10.1.121.0/24</a></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)"><font color="#0000ff" face="verdana, sans-serif">(</font>VPN-Server-A, B is similar)<br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">#ipsec auto --status</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">000 using kernel interface: netkey</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 interface lo/lo ::1</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 interface lo/lo 127.0.0.1</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 interface lo/lo 127.0.0.1</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 interface eth0/eth0 192.168.1.120</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 interface eth0/eth0 192.168.1.120</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 interface eth1/eth1 10.1.120.1</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 interface eth1/eth1 10.1.120.1</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 %myid = (none)</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 debug raw+crypt+parsing+emitting+control+lifecycle+klips+dns+oppo+controlmore+pfkey+nattraversal+x509+dpd+oppoinfo</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 </div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 virtual_private (%priv):</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 - allowed 0 subnets: </div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 - disallowed 0 subnets: </div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 WARNING: Either virtual_private= is not specified, or there is a syntax </div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 error in that line. 'left/rightsubnet=vhost:%priv' will not work!</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 WARNING: Disallowed subnets in virtual_private= is empty. If you have </div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 private address space in internal use, it should be excluded!</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 </div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP encrypt: id=3, name=ESP_3DES, ivlen=8, keysizemin=192, keysizemax=192</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP encrypt: id=6, name=ESP_CAST, ivlen=8, keysizemin=128, keysizemax=128</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP encrypt: id=7, name=ESP_BLOWFISH, ivlen=8, keysizemin=40, keysizemax=448</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP encrypt: id=11, name=ESP_NULL, ivlen=0, keysizemin=0, keysizemax=0</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP encrypt: id=12, name=ESP_AES, ivlen=8, keysizemin=128, keysizemax=256</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP encrypt: id=13, name=ESP_AES_CTR, ivlen=8, keysizemin=128, keysizemax=256</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP encrypt: id=14, name=ESP_AES_CCM_A, ivlen=8, keysizemin=128, keysizemax=256</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP encrypt: id=15, name=ESP_AES_CCM_B, ivlen=12, keysizemin=128, keysizemax=256</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP encrypt: id=16, name=ESP_AES_CCM_C, ivlen=16, keysizemin=128, keysizemax=256</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP encrypt: id=18, name=ESP_AES_GCM_A, ivlen=8, keysizemin=128, keysizemax=256</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP encrypt: id=19, name=ESP_AES_GCM_B, ivlen=12, keysizemin=128, keysizemax=256</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP encrypt: id=20, name=ESP_AES_GCM_C, ivlen=16, keysizemin=128, keysizemax=256</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP encrypt: id=22, name=(null), ivlen=8, keysizemin=128, keysizemax=256</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP encrypt: id=252, name=ESP_SERPENT, ivlen=8, keysizemin=128, keysizemax=256</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP encrypt: id=253, name=ESP_TWOFISH, ivlen=8, keysizemin=128, keysizemax=256</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP auth attr: id=1, name=AUTH_ALGORITHM_HMAC_MD5, keysizemin=128, keysizemax=128</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP auth attr: id=2, name=AUTH_ALGORITHM_HMAC_SHA1, keysizemin=160, keysizemax=160</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP auth attr: id=5, name=AUTH_ALGORITHM_HMAC_SHA2_256, keysizemin=256, keysizemax=256</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP auth attr: id=6, name=AUTH_ALGORITHM_HMAC_SHA2_384, keysizemin=384, keysizemax=384</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP auth attr: id=7, name=AUTH_ALGORITHM_HMAC_SHA2_512, keysizemin=512, keysizemax=512</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP auth attr: id=8, name=(null), keysizemin=160, keysizemax=160</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP auth attr: id=9, name=(null), keysizemin=128, keysizemax=128</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm ESP auth attr: id=251, name=(null), keysizemin=0, keysizemax=0</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 </div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE encrypt: id=0, name=(null), blocksize=16, keydeflen=128</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE encrypt: id=0, name=(null), blocksize=16, keydeflen=128</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE encrypt: id=0, name=(null), blocksize=16, keydeflen=128</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE encrypt: id=0, name=(null), blocksize=16, keydeflen=128</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE encrypt: id=0, name=(null), blocksize=16, keydeflen=128</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE encrypt: id=0, name=(null), blocksize=16, keydeflen=128</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE encrypt: id=3, name=OAKLEY_BLOWFISH_CBC, blocksize=8, keydeflen=128</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE encrypt: id=5, name=OAKLEY_3DES_CBC, blocksize=8, keydeflen=192</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE encrypt: id=7, name=OAKLEY_AES_CBC, blocksize=16, keydeflen=128</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE encrypt: id=65004, name=OAKLEY_SERPENT_CBC, blocksize=16, keydeflen=128</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE encrypt: id=65005, name=OAKLEY_TWOFISH_CBC, blocksize=16, keydeflen=128</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE encrypt: id=65289, name=OAKLEY_TWOFISH_CBC_SSH, blocksize=16, keydeflen=128</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE hash: id=1, name=OAKLEY_MD5, hashsize=16</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE hash: id=2, name=OAKLEY_SHA1, hashsize=20</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE hash: id=4, name=OAKLEY_SHA2_256, hashsize=32</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE hash: id=5, name=OAKLEY_SHA2_384, hashsize=48</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE hash: id=6, name=OAKLEY_SHA2_512, hashsize=64</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE dh group: id=2, name=OAKLEY_GROUP_MODP1024, bits=1024</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE dh group: id=5, name=OAKLEY_GROUP_MODP1536, bits=1536</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE dh group: id=14, name=OAKLEY_GROUP_MODP2048, bits=2048</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE dh group: id=15, name=OAKLEY_GROUP_MODP3072, bits=3072</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE dh group: id=16, name=OAKLEY_GROUP_MODP4096, bits=4096</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE dh group: id=17, name=OAKLEY_GROUP_MODP6144, bits=6144</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE dh group: id=18, name=OAKLEY_GROUP_MODP8192, bits=8192</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE dh group: id=22, name=OAKLEY_GROUP_DH22, bits=1024</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE dh group: id=23, name=OAKLEY_GROUP_DH23, bits=2048</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 algorithm IKE dh group: id=24, name=OAKLEY_GROUP_DH24, bits=2048</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 </div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 stats db_ops: {curr_cnt, total_cnt, maxsz} :context={0,0,0} trans={0,0,0} attrs={0,0,0} </div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 </div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 "secgw-vpn": <a href="http://10.1.120.0/24===192.168.1.120">10.1.120.0/24===192.168.1.120</a><192.168.1.120>[+S=C]---192.168.1.1...192.168.1.1---192.168.1.121<192.168.1.121>[+S=C]===<a href="http://10.1.121.0/24">10.1.121.0/24</a>; erouted; eroute owner: #9</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 "secgw-vpn": myip=unset; hisip=unset;</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 "secgw-vpn": ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0; nat_keepalive: yes </div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 "secgw-vpn": policy: PSK+ENCRYPT+TUNNEL+UP+IKEv2ALLOW+SAREFTRACK+lKOD+rKOD; prio: 24,24; interface: eth0; </div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 "secgw-vpn": dpd: action:clear; delay:0; timeout:0;</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 "secgw-vpn": newest ISAKMP SA: #7; newest IPsec SA: #9; </div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 "secgw-vpn": IKE algorithms wanted: 3DES_CBC(5)_000-SHA1(2)_000-MODP1536(5), 3DES_CBC(5)_000-SHA1(2)_000-MODP1024(2)</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 "secgw-vpn": IKE algorithms found: 3DES_CBC(5)_192-SHA1(2)_160-MODP1536(5), 3DES_CBC(5)_192-SHA1(2)_160-MODP1024(2)</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 "secgw-vpn": IKE algorithm newest: 3DES_CBC_192-SHA1-MODP1536</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 </div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 #9: "secgw-vpn":500 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_REPLACE in 27482s; newest IPSEC; eroute owner; isakmp#7; idle; import:admin initiate</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 #9: "secgw-vpn" <a href="mailto:esp.9439d0e0@192.168.1.121">esp.9439d0e0@192.168.1.121</a> <a href="mailto:esp.3cdf6c67@192.168.1.120">esp.3cdf6c67@192.168.1.120</a> <a href="mailto:tun.0@192.168.1.121">tun.0@192.168.1.121</a> <a href="mailto:tun.0@192.168.1.120">tun.0@192.168.1.120</a> ref=0 refhim=4294901761</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 #8: "secgw-vpn":500 STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 26240s; isakmp#7; idle; import:admin initiate</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 #8: "secgw-vpn" <a href="mailto:esp.6fa4ad30@192.168.1.121">esp.6fa4ad30@192.168.1.121</a> <a href="mailto:esp.f544d986@192.168.1.120">esp.f544d986@192.168.1.120</a> <a href="mailto:tun.0@192.168.1.121">tun.0@192.168.1.121</a> <a href="mailto:tun.0@192.168.1.120">tun.0@192.168.1.120</a> ref=0 refhim=4294901761</div><div class="gmail_default" style="font-family:verdana,sans-serif;color:rgb(0,0,255)">000 #7: "secgw-vpn":500 STATE_MAIN_I4 (ISAKMP SA established); EVENT_SA_REPLACE in 799s; newest ISAKMP; lastdpd=-1s(seq in:0 out:0); idle; import:admin initiate</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">000 </div><br></div><div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">===============================</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">Failed When ping from both PC-A and PC-B to another.</div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)"><br></div><div class="gmail_default" style="font-family:verdana,sans-serif;font-size:small;color:rgb(0,0,255)">Thx a lot.</div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><font color="#cfe2f3">Q</font><font color="#9fc5e8">S</font><font color="#6fa8dc">B</font><font color="#3d85c6">D</font><font color="#0b5394">T</font><font color="#073763">0</font><font color="#0c343d">R</font><font color="#134f5c">F</font><font color="#45818e">U</font><font color="#76a5af">i</font><font color="#a2c4c9">B</font><font color="#d0e0e3">G</font><font color="#d9ead3">U</font><font color="#b6d7a8">k</font><font color="#93c47d">9</font><font color="#6aa84f">N</font><font color="#38761d">I</font><font color="#274e13">F</font><font color="#7f6000">J</font><font color="#bf9000">J</font><font color="#f1c232">R</font><font color="#ffd966">V</font><font color="#ffe599">N</font><font color="#fff2cc">U</font><font color="#fce5cd">I</font><font color="#f9cb9c">E</font><font color="#f6b26b">9</font><font color="#e69138">G</font><font color="#b45f06">I</font><font color="#783f04">E</font><font color="#660000">N</font><font color="#990000">U</font><font color="#cc0000">U</font><font color="#e06666">0V</font><font color="#ea9999">V</font></div></div>
</div>