[Openswan Users] 024 need --listen before --initiate and some hints

[Andrea Mennini]

Hi,

I'm trying to set up a VPN on a remote machine that uses fedora FC4 and 
has dynamic public IP address in order to connect to a zywall firewall 
with static public ip address


I have the following ipsec.conf:

config setup
     klipsdebug=all
     plutodebug=all
     interfaces="ipsec0=eth0"

conn zywall
     type=tunnel
     left=192.168.2.2
     leftsubnet=192.168.2.0/24
     leftnexthop=%defaultroute
     right=1.2.3.4 #this is a fake public ip address
     rightsubnet=192.168.1.0/24
     rightnexthop=%defaultroute
     auto=start
     pfs=no
     authby=secret

and my ipsec.secrets

1.2.3.4 %any : PSK "mypassword"

When I issue a ipsec auto --up zywall I have an error:

024 need --listen before --initiate

What does it means?

More, where are klips and pluto logs?

Thanks in advance

-- 

Andrea

ICQ:5459894
Registered Linux User #24583