[Openswan Users] Firewall rules for Openswan and Ipsec tool in win xp...

[Deepak Naidu]

Here the log, can any one help me out.....
 
C:\ipsec>ipsec
IPSec Version 2.2.0 (c) 2001-2003 Marcus Mueller
Getting running Config ...
Microsoft's Windows XP identified
Setting up IPSec ...
        Deactivating old policy...
        Removing old policy...
Connection roadwarrior:
        MyTunnel     : 192.168.1.2
        MyNet        : 192.168.1.2/255.255.255.255
        PartnerTunnel: 202.x.x.x
        PartnerNet   : 192.168.2.0/255.255.255.0
        CA (ID)      : C=CN, S=state, L=city, O=company, OU...
        PFS          : n
        Auto         : start
        Auth.Mode    : MD5
        Rekeying     : 3600S/50000K
        Activating policy...
 
C:\ipsec>ping 192.168.2.234
Pinging 192.168.2.234 with 32 bytes of data:
Negotiating IP Security.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 192.168.2.234:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),


Deepak Naidu <deepak_nai at yahoo.com> wrote:
Hi,

I am using Openswan 2.3.1 VPN server on FC3
2.6.9smp kernel. It is behind a NAT and I have natted
ports 4500, and 500. The issue is when using
l2tpd+x509cert from Winxp with VPN dialer is working
fine. But when using Mullers' ipsec.exe tool, with
the below configs in the ipsec.conf of Winxp pc.... I
am unable to ping my network.. It doesnt even give
negotiating message, but host unreacheable....

Should I have to write some more firewall rules to
open the ports in my NAT.

I have SP2 with support tools and ipseccmd.exe file..

Winxp is a roadwarrior on dialup...

Please advise me...

Ipsec.conf on Winxp...

conn roadwarrior
pfs=yes
left=%any
right=202.x.x.x 
rightsubnet=192.168.2.0/24
rightca="C=IN, S=state, L=location, O=company,
OU=IT, CN=name, E=name at company.com"
network=auto
auto=start


Regards,
Deepak.



___________________________________________________________ 
How much free photo storage do you get? Store your holiday 
snaps for FREE with Yahoo! Photos http://uk.photos.yahoo.com
_______________________________________________
Users mailing list
Users at openswan.org
http://lists.openswan.org/mailman/listinfo/users

		
---------------------------------
How much free photo storage do you get? Store your holiday snaps for FREE with Yahoo! Photos. Get Yahoo! Photos
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20050509/7f85b51e/attachment.htm