<div dir="ltr"><div><div>Hi,<br></div>Thank you for the help. I tried initiating the tunnel with the most minimum configuration. So, here is the problem,<br></div><div>when I try to connect to the Cisco ASA, the source ip attached to the packet is 10.1.10.0 instead of my public ip. And this is not recognized in the Cisco ACL. Due to this my session is getting terminated from the remote end. Is there any way for me to change the address associated with the packet to be my public ip? <br><br></div><div>Here is a sample error from the Cisco ASA logs : <br><br></div><div>7|Feb 15 2017|14:27:21|713222|||||Group = <my-public-ip>, IP = <my-public-ip>, Static Crypto Map check, map = outside_map, seq = 221,
ACL does not match proxy IDs <b><u><span style="color:rgb(255,0,0)">src:10.1.10.0</span></u></b> dst:<remote-subnet><br><br></div><div>Any help in order to prevent this will be great!<br></div><div>Thank you.<br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Feb 15, 2017 at 6:54 AM, John Crisp <span dir="ltr"><<a href="mailto:jcrisp@safeandsoundit.co.uk" target="_blank">jcrisp@safeandsoundit.co.uk</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On 14/02/17 22:25, Poorva Kuber wrote:<br>
> My Openswan package was overridden by libreswan 3.15. When i remove the<br>
> aggressive mode, nothing changes. I get the same results that I am<br>
> getting when it is on.<br>
><br>
<br>
</span>First, check your logs. That is what they are there for ;-)<br>
<br>
If you are using libreswan check out the wiki pages:<br>
<br>
<a href="https://libreswan.org/man/ipsec.conf.5.html" rel="noreferrer" target="_blank">https://libreswan.org/man/<wbr>ipsec.conf.5.html</a><br>
<a href="https://libreswan.org/wiki/FAQ" rel="noreferrer" target="_blank">https://libreswan.org/wiki/FAQ</a><br>
<a href="https://libreswan.org/wiki/Configuration_examples" rel="noreferrer" target="_blank">https://libreswan.org/wiki/<wbr>Configuration_examples</a><br>
<a href="https://libreswan.org/wiki/Subnet_to_subnet_VPN" rel="noreferrer" target="_blank">https://libreswan.org/wiki/<wbr>Subnet_to_subnet_VPN</a><br>
<br>
Check left/leftnexthop in the documentation. Probably try<br>
<br>
left=%defaultroute<br>
<br>
leave out leftnexthop<br>
<br>
You can leave out ike and phase2alg and it should try all available<br>
encryption methods<br>
<br>
I'd remove as much as you can and then add options as required.<br>
<br>
Libreswan will connect with Openswan.<br>
<br>
Try something really simple like this for starters.<br>
<br>
==============================<wbr>=<br>
<br>
/etc/ipsec.conf<br>
<br>
===================<br>
<br>
config setup<br>
protostack=netkey<br>
plutodebug=none<br>
klipsdebug=none<br>
plutostderrlog=/var/log/pluto/<wbr>pluto.log<br>
dumpdir=/var/run/pluto/<br>
nat_traversal=yes<br>
virtual_private=%v4:<a href="http://192.168.1.0/24" rel="noreferrer" target="_blank">192.168.1.<wbr>0/24</a><br>
<br>
include /etc/ipsec.d/ipsec.conf<br>
<br>
==============================<wbr>=<br>
<br>
/etc/ipsec.d/ipsec.conf<br>
<br>
===================<br>
<br>
conn Test<br>
type=tunnel<br>
authby=secret<br>
auto=add<br>
pfs=yes<br>
left=%defaultroute<br>
leftsubnet=<a href="http://192.168.0.0/24" rel="noreferrer" target="_blank">192.168.0.0/24</a><br>
right=1.2.3.4<br>
rightsubnet=<a href="http://192.168.1.0/24" rel="noreferrer" target="_blank">192.168.1.0/24</a><br>
<br>
<br>
<br>______________________________<wbr>_________________<br>
<a href="mailto:Users@lists.openswan.org">Users@lists.openswan.org</a><br>
<a href="https://lists.openswan.org/mailman/listinfo/users" rel="noreferrer" target="_blank">https://lists.openswan.org/<wbr>mailman/listinfo/users</a><br>
Micropayments: <a href="https://flattr.com/thing/38387/IPsec-for-Linux-made-easy" rel="noreferrer" target="_blank">https://flattr.com/thing/<wbr>38387/IPsec-for-Linux-made-<wbr>easy</a><br>
Building and Integrating Virtual Private Networks with Openswan:<br>
<a href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155" rel="noreferrer" target="_blank">http://www.amazon.com/gp/<wbr>product/1904811256/104-<wbr>3099591-2946327?n=283155</a><br></blockquote></div><br></div>