FW: [Openswan Users] 2.3.1 Problems

[Yiannis Mavroukakis]

Hey Jacco,

I'm actually using some of your setup, just different labels but I'll
change it to what you posted ;) There are firewalls at both ends but
I've made sure nothing is blocked. The openwan server is running on the
public ip (which is not dynamic).  Out of curiosity, how do I bind
openswan on a particular public/private IP?

Cheers,

Yiannis.

-----Original Message-----
From: Jacco de Leeuw [mailto:jacco2 at dds.nl]
Sent: 13 July 2005 09:22
To: Openswan Users mailing list
Subject: RE: [Openswan Users] Status of Openswan 2.3.2

Yiannis Mavroukakis wrote:

>
> I'm facing a problem setting up OpenSwan 2.3.1.

You did not include your ipsec.conf but it appears you are using Nate
Carlson's sample configuration for L2TP/IPsec.
Then I would recommend my previous e-mail:
http://lists.openswan.org/pipermail/users/2005-July/005651.html

> failed. Errno 111: Connection refused

Is there a firewall acting up somewhere?

> pluto[12768]: "roadwarrior-l2tp"[2] 83.x.x.x:4500 #2: ASSERTION FAILED

> at demux.c:1799: STATE_IKE_FLOOR <= from_state && from_state <= 
> STATE_IKE_ROOF

The Openswan team will have to comment on this. It might have been fixed
in the upcoming Openswan 2.4.0.

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl


________________________________________________________________________
This e-mail has been scanned for all known viruses.

Note:__________________________________________________________________
This message is for the named person's use only. It may contain
confidential, proprietary or legally privileged information. No
confidentiality or privilege is waived or lost by any mistransmission.
If you receive this message in error, please immediately delete it and
all copies of it from your system, destroy any hard copies of it and
notify the sender. You must not, directly or indirectly, use, disclose,
distribute, print, or copy any part of this message if you are not the
intended recipient. Jaguar Freight Services and any of its subsidiaries
each reserve the right to monitor all e-mail communications through its
networks.
Any views expressed in this message are those of the individual sender,
except where the message states otherwise and the sender is authorized
to state them to be the views of any such entity.
________________________________________________________________________
This e-mail has been scanned for all known viruses.