[Openswan Users] small dsl to dsl network vpn setup
heath bunting
heath at irational.org
Tue Nov 15 11:17:02 CET 2005
hello all
hope you can help me
i am trying to set up a vpn connection between two small networks
both are connected to the internet via standard dsl connections
i have built 2 linux boxes (Fedora Core release 3 (Heidelberg))
configured their ips as 10.0.0.1 & 10.0.0.128
and installed openswan (openswan-2.3.1-1)
i have turned off the linux box firewalls
i have opened ports 50/51/500/4500 on both dsl router/ firewalls
when i execute:
/usr/sbin/ipsec auto --up net-to-net
i get:
022 "net-to-net": We cannot identify ourselves with either end of
this connection.
i followed the Net-to-Net connection instructions on:
http://wiki.openswan.org/index.php/Configuring
the configuration is am using on both ends is:
version 2.0 # conforms to second version of ipsec.conf specification
# basic configuration
config setup
conn net-to-net
left=212.159.64.84 # Local vitals
leftsubnet=10.0.0.8/29 #
leftid=@factory.bristol-glass.co.uk #
leftrsasigkey=0sAQOxy2v8W+cRwdAuSRryZ ...
leftnexthop=%defaultroute # correct in many situations
right=80.177.165.240 # Remote vitals
rightsubnet=10.0.0.129/28 #
rightid=@porlock.bristol-glass.co.uk #
rightrsasigkey=0sAQO7BpaUyeMqK7ufP/G0 ...
rightnexthop=%defaultroute # correct in many situations
auto=add # authorizes but doesn't start this
# connection at startup
#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf
can anybody spot anything obvious
many thanks
heath
More information about the Users
mailing list