[Openswan Users] SA established but not ping

[sasa]

"Paul Wouters" wrote:
> Seems 5.6.7.8 is doing NAT

..ok but is very strange that:

Jan  2 17:54:26 fw2 ipsec__plutorun: ...could not start conn "princ-cardito"

..and then:

Jan  2 17:54:49 fw2 pluto[5278]: "princ-cardito" #3: STATE_QUICK_R2: IPsec
SA established {ESP=>0x4e571584 <0x30c7f1ea xfrm=3DES_0-HMAC_MD5
NATD=5.6.7.8:4500 DPD=none}
...
0    10.0.1.0/24   --> 192.168.0.0/24  --> tun0x1002 at 5.6.7.8

???
I don't understand where my error !
thanks.


----- Original Message ----- 
From: "Paul Wouters" <paul at xelerance.com>
To: "sasa" <sasa at shoponweb.it>
Cc: <users at openswan.org>
Sent: Monday, January 02, 2006 6:45 PM
Subject: Re: [Openswan Users] SA established but not ping


> On Mon, 2 Jan 2006, sasa wrote:
>
>> Jan  2 17:54:26 fw2 pluto[5278]: adding interface ipsec0/eth0 1.2.3.4:500
>> Jan  2 17:54:26 fw2 pluto[5278]: adding interface ipsec0/eth0 
>> 1.2.3.4:4500
>
>> Jan  2 17:54:49 fw2 pluto[5278]: | NAT-T: new mapping 5.6.7.8:1/4500)
>
>> Jan  2 17:54:49 fw2 pluto[5278]: "princ-cardito" #3: STATE_QUICK_R2: 
>> IPsec SA
>> established {ESP=>0x4e571584 <0x30c7f1ea xfrm=3DES_0-HMAC_MD5
>> NATD=5.6.7.8:4500 DPD=none}
>
> Seems 5.6.7.8 is doing NAT.
>
> Paul
>