[Openswan Users] safenet PSK + openswan + NAT

Luca Andreoli l.andreoli at kelyansmc.it
Wed Sep 20 10:49:29 EDT 2006



Paul Wouters ha scritto:
> On Wed, 20 Sep 2006, Luca Andreoli wrote:
>
>   
>> i'm 192.168.200.11
>> i have to go to 192.4.0.36 machine.....
>>
>>
>> Paul Wouters ha scritto:
>>     
>>> On Wed, 20 Sep 2006, Luca Andreoli wrote:
>>>
>>>
>>>       
>>>> cannot respond to IPsec SA request because no connection is known for
>>>> 192.4.0.36/32===81.72.153.201[S=C]...83.103.71.142[mantovani at benne.net,S=C]===192.168.200.11/32
>>>>
>>>>         
>>> Is 192.4.0.0/24 that is used by your client part of your virtual_private= on
>>> the sever?
>>>       
>
> So is 192.168.200.0/24 in the virtual_private= then?
>
> I am a bit confused about your setup though. Is the openswan sever behind
> NAT on 192.4.0.36, or is it 81.72.153.201? If openswan is on 81.72.153.201,
> then you seem to have a rightsubnet of 192.4.0.36/32 on the client, which you
> don't have on the server.
>
> Perhaps you should tell us what you are trying to do and show the client/server
> configuration.
>
> Paul
>   
client safenet 
-----------------fw----------------------------internet------------------fwmantovani-------------------serverunix

192.168.200.11                     83.103.71.142                         
                                     openswan81.72.153.201               
      192.4.0.36

-- 
========================================
Andreoli Luca
System Support Division
Kelyan SMC S.p.a. - Franco Bernabè Group
Via Nuova Ponente 1/A-1/B
41012 Carpi (MO), Italy
Tel.+39 059 637611
Fax.+39 059 694768
E-Mail: l.andreoli at kelyansmc.it
======================================== 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20060920/8f6ee47b/attachment.html 


More information about the Users mailing list