[Openswan Users] Firewall rules for Openswan and Ipsec tool in win xp...

[Paul Wouters]

On Mon, 9 May 2005, Deepak Naidu wrote:

> C:\ipsec>ping 192.168.2.234
> Pinging 192.168.2.234 with 32 bytes of data:
> Negotiating IP Security.
> Request timed out.
> Request timed out.
> Request timed out.
> Ping statistics for 192.168.2.234:
>    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

Check the oakley.log to see what Windows thinks is happening. And
check the openswan logs to see what it is saying. Though likely,
if this is a windows misconfiguration, openswan will just log
"no response to....." entries.

See the wiki on how to enable oakley.log on windows.

Paul

>
> Deepak Naidu <deepak_nai at yahoo.com> wrote:
> Hi,
>
> I am using Openswan 2.3.1 VPN server on FC3
> 2.6.9smp kernel. It is behind a NAT and I have natted
> ports 4500, and 500. The issue is when using
> l2tpd+x509cert from Winxp with VPN dialer is working
> fine. But when using Mullers' ipsec.exe tool, with
> the below configs in the ipsec.conf of Winxp pc.... I
> am unable to ping my network.. It doesnt even give
> negotiating message, but host unreacheable....
>
> Should I have to write some more firewall rules to
> open the ports in my NAT.
>
> I have SP2 with support tools and ipseccmd.exe file..
>
> Winxp is a roadwarrior on dialup...
>
> Please advise me...
>
> Ipsec.conf on Winxp...
>
> conn roadwarrior
> pfs=yes
> left=%any
> right=202.x.x.x
> rightsubnet=192.168.2.0/24
> rightca="C=IN, S=state, L=location, O=company,
> OU=IT, CN=name, E=name at company.com"
> network=auto
> auto=start
>
>
> Regards,
> Deepak.
>
>
>
> ___________________________________________________________
> How much free photo storage do you get? Store your holiday
> snaps for FREE with Yahoo! Photos http://uk.photos.yahoo.com
> _______________________________________________
> Users mailing list
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
>
>
> ---------------------------------
> How much free photo storage do you get? Store your holiday snaps for FREE with Yahoo! Photos. Get Yahoo! Photos