[Openswan Users] Windows XP to OpenSWAN with ipsec.exe

[Paul Wouters]

On Wed, 26 Apr 2006, Pat Fricke wrote:

> I have an existing Fedora core 4 system running Openswan version
> U2.4.4/K2.6.11-1.1369_FC4 (as reported by Webmin). The server has 7
> roadwarrier  connections using Linksys routers. Now I need to add a laptop
> roadwarrier with satellite Internet (Windows XP). My test bed is a stand
> alone PC connected directly to DSL modem. Currently all firewalling, virus
> scanning, pop-up blockers, etc. on the windows side are OFF.

> If I add rightsubnet=192.xxx.xxx.xxx/255.255.255.255(server internal ip)  on
> the Windows side it no longer trys to connect (no entries in the secure log
> at all).
>
> If I add leftsubnet=192.xxx.xxx.xxx/255.255.255.255(server internal ip) on
> the server side OpenSWAN reports
>
> cannot respond to IPsec SA request because no connection is known for
> 66.xxx.xxx.xxx

Do you have an appropriate virtual_private setting and rightsubnet=vhost
setting on the server?

> I see a lot of people are using a different tool (lsipsectool). Is this the
> direction I should be going?
> Does this tool support preshared key?

Yes.

Paul