[Openswan Users] Can't connect...

Clif Smith openswan at cjs226.com
Sat Apr 23 02:41:53 CEST 2005


Please help!  I'm trying to establish a connection:
  - from my FC3 system with the IP 192.168.1.21
  - through my linksys router with the private IP 192.168.1.1 and the 
public IP $HOME_IP
  - to a Sonicwall TZ170 with the public IP $WORK_IP and the private IP 
10.1.1.1
  - to connect to the subnet 10.1.1.0/24

Here's my ipsec.conf:
conn work
        # Left security gateway, subnet behind it, next hop toward right.
        left=192.168.1.21
        leftsubnet=192.168.1.0/24
        leftnexthop=$HOME_IP
        # Right security gateway, subnet behind it, next hop toward left.
        right=10.1.1.1
        rightsubnet=10.1.1.0/24
        rightnexthop=$WORK_IP

Here's my ipsec.secrets:
$WORK_IP $HOME_IP : PSK "$SHARED_SECRET"

Here's the log:
Apr 22 21:58:13 centipede ipsec__plutorun: Starting Pluto subsystem...
Apr 22 21:58:13 centipede pluto[7972]: Starting Pluto (Openswan Version 
2.3.1 X.509-1.5.4 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR; Vendor ID 
OEExalF{_o`m)
Apr 22 21:58:13 centipede pluto[7972]: Setting port floating to off
Apr 22 21:58:13 centipede pluto[7972]: port floating activate 0/1
Apr 22 21:58:13 centipede pluto[7972]:   including NAT-Traversal patch 
(Version 0.6c) [disabled]
Apr 22 21:58:13 centipede pluto[7972]: | opening /dev/urandom
Apr 22 21:58:13 centipede pluto[7972]: | inserting event 
EVENT_REINIT_SECRET, timeout in 3600 seconds
Apr 22 21:58:13 centipede pluto[7972]: | inserting event 
EVENT_PENDING_PHASE2, timeout in 120 seconds
Apr 22 21:58:13 centipede pluto[7972]: ike_alg_register_enc(): 
Activating OAKLEY_AES_CBC: Ok (ret=0)
Apr 22 21:58:13 centipede pluto[7972]: starting up 1 cryptographic helpers
Apr 22 21:58:13 centipede pluto[7973]: | opening /dev/urandom
Apr 22 21:58:13 centipede pluto[7972]: started helper pid=7973 (fd:6)
Apr 22 21:58:13 centipede pluto[7972]: | process 7972 listening for 
PF_KEY_V2 on file descriptor 7
Apr 22 21:58:13 centipede pluto[7972]: Using Linux 2.6 IPsec interface code
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_hdr_build:
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0p0xbffc38d0 
pfkey_ext=0p0xbffc4930 *pfkey_ext=0p(nil).
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0p0xbffc38d0 
pfkey_ext=0p0xbffc4930 *pfkey_ext=0p0x8726dc0.
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_build: pfkey_msg=0p0x8726dd8 allocated 16 
bytes, &(extensions[0])=0p0xbffc4930
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_build: extensions permitted=00000001, 
seen=00000001, required=00000001.
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_parse: parsing message ver=2, 
type=7(register), errno=0, satype=2(AH), len=2, res=0, seq=1, pid=7972.
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_parse: remain=0
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, 
required=00000001.
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, 
seen=00000001, required=00000001.
Apr 22 21:58:13 centipede pluto[7972]: | finish_pfkey_msg: SADB_REGISTER 
message 1 for AH
Apr 22 21:58:13 centipede pluto[7972]: |   02 07 00 02  02 00 00 00  01 
00 00 00  24 1f 00 00
Apr 22 21:58:13 centipede pluto[7972]: | pfkey_get: SADB_REGISTER message 1
Apr 22 21:58:13 centipede pluto[7972]: | AH registered with kernel.
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_hdr_build:
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0p0xbffc38d0 
pfkey_ext=0p0xbffc4930 *pfkey_ext=0p(nil).
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0p0xbffc38d0 
pfkey_ext=0p0xbffc4930 *pfkey_ext=0p0x8726dc0.
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_build: pfkey_msg=0p0x8726dd8 allocated 16 
bytes, &(extensions[0])=0p0xbffc4930
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_build: extensions permitted=00000001, 
seen=00000001, required=00000001.
Apr 22 21:58:13 centipede pluto[7973]: ! helper 0 waiting on fd: 7
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_parse: parsing message ver=2, 
type=7(register), errno=0, satype=3(ESP), len=2, res=0, seq=2, pid=7972.
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_parse: remain=0
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, 
required=00000001.
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, 
seen=00000001, required=00000001.
Apr 22 21:58:13 centipede pluto[7972]: | finish_pfkey_msg: SADB_REGISTER 
message 2 for ESP
Apr 22 21:58:13 centipede pluto[7972]: |   02 07 00 03  02 00 00 00  02 
00 00 00  24 1f 00 00
Apr 22 21:58:13 centipede pluto[7972]: | pfkey_get: SADB_REGISTER message 2
Apr 22 21:58:13 centipede pluto[7972]: | alg_init():memset(0x80f2c20, 0, 
2016) memset(0x80f3400, 0, 2048)
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_register_pfkey(): 
SADB_SATYPE_ESP: sadb_msg_len=15 sadb_supported_len=40
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_add():satype=3, 
exttype=14, alg_id=251
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_register_pfkey(): 
SADB_SATYPE_ESP: alg[0], exttype=14, satype=3, alg_id=251, alg_ivlen=0, 
alg_minbits=0, alg_maxbits=0, res=0, ret=1
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_add():satype=3, 
exttype=14, alg_id=2
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_register_pfkey(): 
SADB_SATYPE_ESP: alg[1], exttype=14, satype=3, alg_id=2, alg_ivlen=0, 
alg_minbits=128, alg_maxbits=128, res=0, ret=1
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_add():satype=3, 
exttype=14, alg_id=3
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_register_pfkey(): 
SADB_SATYPE_ESP: alg[2], exttype=14, satype=3, alg_id=3, alg_ivlen=0, 
alg_minbits=160, alg_maxbits=160, res=0, ret=1
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_add():satype=3, 
exttype=14, alg_id=5
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_register_pfkey(): 
SADB_SATYPE_ESP: alg[3], exttype=14, satype=3, alg_id=5, alg_ivlen=0, 
alg_minbits=256, alg_maxbits=256, res=0, ret=1
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_register_pfkey(): 
SADB_SATYPE_ESP: sadb_msg_len=15 sadb_supported_len=64
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_add():satype=3, 
exttype=15, alg_id=11
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_register_pfkey(): 
SADB_SATYPE_ESP: alg[4], exttype=15, satype=3, alg_id=11, alg_ivlen=0, 
alg_minbits=0, alg_maxbits=0, res=0, ret=1
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_add():satype=3, 
exttype=15, alg_id=2
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_register_pfkey(): 
SADB_SATYPE_ESP: alg[5], exttype=15, satype=3, alg_id=2, alg_ivlen=8, 
alg_minbits=64, alg_maxbits=64, res=0, ret=1
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_add():satype=3, 
exttype=15, alg_id=3
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_register_pfkey(): 
SADB_SATYPE_ESP: alg[6], exttype=15, satype=3, alg_id=3, alg_ivlen=8, 
alg_minbits=192, alg_maxbits=192, res=0, ret=1
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_add():satype=3, 
exttype=15, alg_id=7
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_register_pfkey(): 
SADB_SATYPE_ESP: alg[7], exttype=15, satype=3, alg_id=7, alg_ivlen=8, 
alg_minbits=40, alg_maxbits=448, res=0, ret=1
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_add():satype=3, 
exttype=15, alg_id=12
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_register_pfkey(): 
SADB_SATYPE_ESP: alg[8], exttype=15, satype=3, alg_id=12, alg_ivlen=8, 
alg_minbits=128, alg_maxbits=256, res=0, ret=1
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_add():satype=3, 
exttype=15, alg_id=252
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_register_pfkey(): 
SADB_SATYPE_ESP: alg[9], exttype=15, satype=3, alg_id=252, alg_ivlen=8, 
alg_minbits=128, alg_maxbits=256, res=0, ret=1
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_add():satype=3, 
exttype=15, alg_id=253
Apr 22 21:58:13 centipede pluto[7972]: | kernel_alg_register_pfkey(): 
SADB_SATYPE_ESP: alg[10], exttype=15, satype=3, alg_id=253, alg_ivlen=8, 
alg_minbits=128, alg_maxbits=256, res=0, ret=1
Apr 22 21:58:13 centipede pluto[7972]: | ESP registered with kernel.
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_hdr_build:
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_hdr_build: on_entry &pfkey_ext=0p0xbffc38d0 
pfkey_ext=0p0xbffc4930 *pfkey_ext=0p(nil).
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_hdr_build: on_exit &pfkey_ext=0p0xbffc38d0 
pfkey_ext=0p0xbffc4930 *pfkey_ext=0p0x8726dc0.
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_build: pfkey_msg=0p0x8726dd8 allocated 16 
bytes, &(extensions[0])=0p0xbffc4930
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_build: extensions permitted=00000001, 
seen=00000001, required=00000001.
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_parse: parsing message ver=2, 
type=7(register), errno=0, satype=9(IPIP), len=2, res=0, seq=3, pid=7972.
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_parse: remain=0
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, 
required=00000001.
Apr 22 21:58:13 centipede pluto[7972]: | 
pfkey_lib_debug:pfkey_msg_parse: extensions permitted=00000001, 
seen=00000001, required=00000001.
Apr 22 21:58:13 centipede pluto[7972]: | finish_pfkey_msg: SADB_REGISTER 
message 3 for IPCOMP
Apr 22 21:58:13 centipede pluto[7972]: |   02 07 00 09  02 00 00 00  03 
00 00 00  24 1f 00 00
Apr 22 21:58:13 centipede pluto[7972]: | pfkey_get: SADB_REGISTER message 3
Apr 22 21:58:13 centipede pluto[7972]: | IPCOMP registered with kernel.
Apr 22 21:58:13 centipede pluto[7972]: Changing to directory 
'/etc/ipsec.d/cacerts'
Apr 22 21:58:13 centipede pluto[7972]: Changing to directory 
'/etc/ipsec.d/aacerts'
Apr 22 21:58:13 centipede pluto[7972]: Changing to directory 
'/etc/ipsec.d/ocspcerts'
Apr 22 21:58:13 centipede pluto[7972]: Changing to directory 
'/etc/ipsec.d/crls'
Apr 22 21:58:13 centipede pluto[7972]:   Warning: empty directory
Apr 22 21:58:13 centipede pluto[7972]: | inserting event 
EVENT_LOG_DAILY, timeout in 7307 seconds
Apr 22 21:58:13 centipede pluto[7972]: | next event EVENT_PENDING_PHASE2 
in 120 seconds
Apr 22 21:58:13 centipede pluto[7972]: |
Apr 22 21:58:13 centipede pluto[7972]: | *received whack message
Apr 22 21:58:13 centipede pluto[7972]: listening for IKE messages
Apr 22 21:58:13 centipede pluto[7972]: | found lo with address 127.0.0.1
Apr 22 21:58:13 centipede pluto[7972]: | found eth0 with address 
192.168.1.21
Apr 22 21:58:13 centipede pluto[7972]: adding interface eth0/eth0 
192.168.1.21:500
Apr 22 21:58:13 centipede pluto[7972]: adding interface lo/lo 127.0.0.1:500
Apr 22 21:58:14 centipede pluto[7972]: | found lo with address 
0000:0000:0000:0000:0000:0000:0000:0001
Apr 22 21:58:14 centipede pluto[7972]: adding interface lo/lo ::1:500
Apr 22 21:58:14 centipede pluto[7972]: loading secrets from 
"/etc/ipsec.secrets"
Apr 22 21:58:14 centipede pluto[7972]: | next event EVENT_PENDING_PHASE2 
in 119 seconds


More information about the Users mailing list