<HTML><HEAD>
<STYLE id=eMClientCss>BLOCKQUOTE.cite {
PADDING-LEFT: 10px; MARGIN-LEFT: 5px; BORDER-LEFT: #cccccc 1px solid; PADDING-RIGHT: 0px; MARGIN-RIGHT: 0px
}
BLOCKQUOTE.cite2 {
PADDING-TOP: 0px; PADDING-LEFT: 10px; MARGIN-LEFT: 5px; BORDER-LEFT: #cccccc 1px solid; MARGIN-TOP: 3px; PADDING-RIGHT: 0px; MARGIN-RIGHT: 0px
}
.plain PRE {
FONT-SIZE: 100%; FONT-FAMILY: monospace; FONT-WEIGHT: normal; FONT-STYLE: normal
}
.plain TT {
FONT-SIZE: 100%; FONT-FAMILY: monospace; FONT-WEIGHT: normal; FONT-STYLE: normal
}
A IMG {
BORDER-TOP: 0px; BORDER-RIGHT: 0px; BORDER-BOTTOM: 0px; BORDER-LEFT: 0px
}
#x50a8f1b78dd04a16b6fe1aafa70ffd67 {
FONT-SIZE: 12pt; FONT-FAMILY: Tahoma
}
.plain PRE {
FONT-SIZE: 12pt; FONT-FAMILY: Tahoma
}
.plain TT {
FONT-SIZE: 12pt; FONT-FAMILY: Tahoma
}
BODY {
FONT-SIZE: 12pt; FONT-FAMILY: Tahoma
}
</STYLE>
</HEAD>
<BODY scroll=auto>
<DIV>Hello everyone,</DIV>
<DIV> </DIV>
<DIV>I am a newbie and I hope someone can save me from pulling my hair out here.</DIV>
<DIV> </DIV>
<DIV>I am trying to setup an IPSec VPN site to site (PSK) with details as follows:</DIV>
<DIV> </DIV>
<DIV>==>Left Side (Which I am managing)</DIV>
<DIV> </DIV>
<DIV>Debian GNU/Linux 7.0.0 Wheezy</DIV>
<DIV>Linux hostname 3.2.0-4-amd64</DIV>
<DIV>Linux Openswan U2.6.37/K3.2.0-4-amd64 (netkey)</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>==>Right Side (Provider Side)</DIV>
<DIV> </DIV>
<DIV>Windows Server 2008R2<BR>Microsoft Forefront TMG</DIV>
<DIV> </DIV>
<DIV>Both sides have a </DIV>
<DIV>Phase 1</DIV>
<DIV>Pre-Shared Key, 3des-sha1</DIV>
<DIV> </DIV>
<DIV>Phase 2</DIV>
<DIV>3des-sha1</DIV>
<DIV> </DIV>
<DIV>My tunnel just wont come up. I have checked with:</DIV>
<DIV> </DIV>
<DIV><SPAN id=x50a8f1b78dd04a16b6fe1aafa70ffd67>========</SPAN></DIV>
<DIV># ipsec verify<BR>Checking your system to see if IPsec got installed and started correctly:<BR>Version check and ipsec on-path [OK]<BR>Linux Openswan U2.6.37/K3.2.0-4-amd64 (netkey)<BR>Checking for IPsec support in kernel [OK]<BR> SAref kernel support [N/A]<BR> NETKEY: Testing XFRM related proc values [OK]<BR> [OK]<BR> [OK]<BR>Checking that pluto is running [OK]<BR> Pluto listening for IKE on udp 500 [OK]<BR> Pluto listening for NAT-T on udp 4500 [OK]<BR>Two or more interfaces found, checking IP forwarding [OK]<BR>Checking NAT and MASQUERADEing [OK]<BR>Checking for 'ip' command [OK]<BR>Checking /bin/sh is not /bin/dash [OK]<BR>Checking for 'iptables' command [OK]<BR>Opportunistic Encryption Support [DISABLED]<BR></DIV>
<DIV># service ipsec status<BR>IPsec running - pluto pid: 2780<BR>pluto pid 2780<BR>No tunnels up<BR></DIV>
<DIV>#ipsec auto --status</DIV>
<DIV>[snip/...]</DIV>
<DIV>000 #1: "tunnel1":500 STATE_MAIN_I1 (sent MI1, expecting MR1); none in -1s; nodpd; idle; import:admin initiate<BR>000 #1: pending Phase 2 for "tunnel1" replacing #0<BR>000<BR>========</DIV>
<DIV> </DIV>
<DIV>This Debian box is running NAT, and the Debian box is the gateway behind the main router leading up to the internet as follows:</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV>((left lan))-->{{Debian Linux with Openswan + Nat}}-->[router]--><<internet>><--[MS 2008 Forefront]</DIV>
<DIV> </DIV>
<DIV>Would appreciate some guides on how I can go about this.</DIV>
<DIV> </DIV>
<DIV>Many thanks,</DIV>
<DIV> </DIV>
<DIV>MPN.</DIV>
<DIV> </DIV>
<DIV> </DIV></BODY></HTML>