[Openswan Users] Ipsec over Fedora Core 4
Andre Monroy
amonroy at goodfoodssa.com
Wed Nov 15 09:31:38 EST 2006
Hi,
I have a problem implementing VPN tunnel Lan to Lan using two host fedora 4,
obviously i have installed openswan-2.4.4-1.rpm and
openswan-docs-2.4.4-1.rpm. This is my ipsec.conf:
NODE A
#########################################################
Version 2.0 #conforms to second version of ipsec.conf specification
#basic configuration
Config setup
Interfaces=ipsec0=eth0
Nat_traversal=yes
Conn sucursal
type=tunnel
left=[192.168.16.12
leftsubnet=192.168.20.0/24
right=192.168.16.13
rightsubnet=192.168.10.0/24
keyingtries=%forever
authby=secret
auto=start
include /etc/ipsec.d/examples/no_oe.conf
#########################################################
NODE B
#########################################################
Version 2.0 #conforms to second version of ipsec.conf specification
#basic configuration
Config setup
Interfaces=ipsec0=eth0
Nat_traversal=yes
Conn sucursal
type=tunnel
left=[192.168.16.13
leftsubnet=192.168.10.0/24
right=192.168.16.12
rightsubnet=192.168.20.0/24
keyingtries=%forever
authby=secret
auto=start
include /etc/ipsec.d/examples/no_oe.conf
#########################################################
Then
I used ipsec ranbits 256 > /etc/ipsec.secrets and send this file by email
from node A to node B, and put in /etc/ipsec.secrets
I used NAT in both nodes.
But my vpn are not connected, when i exec, my linux showme this:
#########################################################
Cheking your system to see if IPsec got installed and started correctly
Version check and ipsec on-path OK
Checking for IPsec support in kernel OK
Checking for RSA private key (/etc/ipsec.secrets) OK
Checking that Pluto is running OK
Two or more interfaces found, checking IP forwarding OK
Checking NAT and MASQUERADEing OK
Checking for ip command OK
Checking for setkeycommand for NETKEY IPsec stack support OK
Oportunistic Encrytion Support
DISSABLED
##########################################################
And when i exec service ipsec status
#############################
IPsec running - pluto pid: 2836
Pluto pid 2836
No tunnels up
############################
I was searching in the web and I was reading the manual, but I didnt found
anything to helpme, I really appreciate if the forum send some tips to
review or maybe and the error in my configuration. With this email I send
you my network diagram.
I prefer if you send me an answer to my e-mail, and then I promise do a
resume to all the community.
Many thanks.
André Monroy Tenorio
Soporte Técnico y Redes
Telf:4170700 ( 596 )
Nextel. 408*3459
Cel 93449199
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20061115/7631262b/attachment-0001.html
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: image/gif
Size: 2489 bytes
Desc: not available
Url : http://lists.openswan.org/pipermail/users/attachments/20061115/7631262b/attachment-0001.gif
-------------- next part --------------
A non-text attachment was scrubbed...
Name: vpn-net.JPG
Type: image/jpeg
Size: 61274 bytes
Desc: not available
Url : http://lists.openswan.org/pipermail/users/attachments/20061115/7631262b/attachment-0001.jpe
More information about the Users
mailing list