[Openswan Users] Openswan connection difficulties

[Jacco de Leeuw]

Steve Wakelin wrote:

> conn sisl
>    left=213.232.93.110
>    leftsubnet=172.16.200.2/32
>    leftcert=www.sfpost.net.pem
>    right=%any
>    rightcert=mail.sis-l.com.pem
>    leftprotoport=17/0
>    rightprotoport=17/1701
>    auto=add
>    pfs=no
> 
> Jun 30 15:26:31 p4-7165 pluto[15750]: "sisl"[3] 62.49.34.242 #3: cannot
> respond to IPsec SA request because no connection is known for
> 213.232.93.110[C=GB, ST=Hertfordshire, L=Harpenden, O=WCSL, OU=sfbackup,
> CN=www.sfpost.net, E=support at wcsl.net,S=C]:17/0...62.49.34.242[C=GB,
> ST=Hertfordshire, L=Harpenden, O=WCSL, OU=sfbackup, CN=mail.sis-l.com,
> E=support at wcsl.net,S=C]:17/1701

This is a configuration for L2TP over IPsec. Are you sure you want that
and not Marcus Mueller's IPSEC.EXE?

For L2TP/IPsec you need an L2TP server and you will also have to remove the
leftsubnet= line.

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl