[Openswan Users] [Openswan dev] book example yields - No route to host...not authenticated using

[Paul Wouters]

On Sun, 26 Nov 2006, Bruce S. Skinner wrote:

> >> >> Is this an authentication issue or a routing issue?
> >> >
> >> > A router in the midde, 172.31.1.200, cannot reach 10.1.1.11.

> > that should not happen. Are you sure you are not firewalling udp port 500?
>
> iptables -L shows nothing on all three machines left, right and router.

> Nov 26 19:37:33 gw pluto[4867]: "sample" #1: ERROR: asynchronous network error report on eth0 (sport=500) for message to 172.31.1.200 port 500, complainant 10.1.1.11: No route to host [errno 113, origin ICMP type 3 code 1 (not authenticated)]

> I know.  These three machines are vmware virtual machines, and are
> just templates for real hardware once I see this flying...

then I guess it has to do with the vmware bridging magic.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155