[Openswan Users] Pb between Openswan and XP via NAT

[Etienne M]

Hi Paul,

I have added : rightsubnet=vhost:%no,%priv
But the problems are always there.

What is the problem ?

Thanks.
Etienne.



>On Thu, 9 Jun 2005, Etienne M wrote:
>
>>pluto[6207]: "nomade"[2] 192.168.10.30:4500 #1: cannot respond to IPsec SA 
>>request because no connection is known for 
>>200.10.10.10/32===192.168.20.10:4500[C=FR, ST=Orsay, L=Essonne, 
>>O=Universite, CN=universite.fr]...192.168.10.30:4500[C=FR, ST=Orsay, 
>>L=Essonne, O=Universite, CN=nomade220]
>
>>conn nomade
>>	right=%any
>>	left=192.168.20.10
>
>>XP ipsec.conf file :
>>conn nomade
>>	left=%any
>>	right=200.10.10.10
>
>This does not match, presumably because of NAT-T. It seems you are missing 
>a
>rightsubnet=vhost:%no,%priv on the server.
>
>Paul