[Openswan Users] VPN starts but fails two minutes later

Ludovic MARCILLY lmarcilly at aressi.fr
Fri Aug 18 10:23:58 EDT 2006


Hi all,

i'm new to openswan and i've difficulties to create VPN between a linux box and my WinXP computer:

---------      ---------
| WinXP | <--> | Linux | <--> LAN
---------      ---------

WinXP : 192.168.9.185
Linux : 192.168.9.235 and 192.168.5.235
LAN   : 192.168.5.0/24

Here is one of my ipsec.conf files (i try a lot of things but without success!)

config setup
        interfaces=%defaultroute
        klipsdebug=none
        plutodebug=none
        plutoload=%search
        plutostart=%search
        uniqueids=yes
        nat_traversal=yes
        virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16,%v4:!192.168.5.0/255.255.255.0,%v4:!192.168.2.0/255.255.255.0

conn %default
        keyingtries=0
        disablearrivalcheck=no

conn Test
        keyingtries=3
        rekey=no
        left=192.168.9.235
        leftnexthop=%defaultroute
        leftsubnet=192.168.5.0/255.255.255.0
        right=192.168.9.185
        rightsubnet=vhost:%no,%priv
        dpddelay=30
        dpdtimeout=120
        dpdaction=clear
        authby=secret
        auto=add

When i try to create VPN, it works but it fails two minutes after! 
When i look at connection status on winXP, i can see the total of bytes send increase but not the total of bytes received.

When i loook at the routing table on the linux box, i can saw a line :

 Destination    Gateway        Genmask          Iface
192.168.9.185  192.168.9.185  255.255.255.255  ipsec0

but this route disapear a few seconds after. Is it normal? I think not...

Also, i have a question about nat-transversal, openswan is already patched but i think this options should be on 'no'. Am i wrong?

I use Openswan 1.0.7, i know it's an old version but i can success to open VPN with that version, it's better!

Thanks a lot for your help and sorry for my english, i'm french!

Ludo.




More information about the Users mailing list