[Openswan Users] problem setting up the roadwarriors

[TESTVPN R119LNXADM]

Dear Sirs,

I still have some problems setting up my roadwarriors. As you could have
read in my previous messages, I can make a net-to-net connection.
While trying to setup my roadwarrior connection I encounter this problem.

029 "road-to-gate": cannot initiate connection without knowing peer IP
address (kind=CK_TEMPLATE)

Now my question is could one of you fine gentleman help me with my problem,

sincerly,

Tjeard

here is my ipsec.conf file

#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf

#
#File: /etc/ipsec.conf
#
conn road-to-gate
    left=172.16.12.33                      # Gateway's information
    leftid=@r119-lnx-e01                 #
    leftsubnet=255.255.0.0/24        #
    leftrsasigkey=0sAQNn+
                                                      #
    rightnexthop=172.16.0.254      # Correct in many situations
    right=%any                               # Wildcard: we don't know the
laptop's IP
    rightid=@r119-lnx-e03             #
    rightrsasigkey=0sAQPNAN
                                                     #
    auto=start                               # authorizes but doesn't start
this
                                                    # connection at startup



here is my ipsec route.

R119-lnx-e01:~# ipsec auto --route road-to-gate
025 "road-to-gate": cannot route template policy of
RSASIG+ENCRYPT+TUNNEL+PFS
025 "road-to-gate": could not route

and here is the ipsec status

R119-lnx-e01:~# ipsec auto --status
000 interface lo/lo ::1
000 interface lo/lo 127.0.0.1
000 interface eth1/eth1 172.16.12.33
000 %myid = (none)
000 debug none
000
000 algorithm ESP encrypt: id=2, name=ESP_DES, ivlen=8, keysizemin=64,
keysizemax=64
000 algorithm ESP encrypt: id=3, name=ESP_3DES, ivlen=8, keysizemin=192,
keysizemax=192
000 algorithm ESP encrypt: id=7, name=ESP_BLOWFISH, ivlen=8, keysizemin=40,
keysizemax=448
000 algorithm ESP encrypt: id=11, name=ESP_NULL, ivlen=0, keysizemin=0,
keysizemax=0
000 algorithm ESP encrypt: id=12, name=ESP_AES, ivlen=8, keysizemin=128,
keysizemax=256
000 algorithm ESP encrypt: id=252, name=ESP_SERPENT, ivlen=8,
keysizemin=128, keysizemax=256
000 algorithm ESP encrypt: id=253, name=ESP_TWOFISH, ivlen=8,
keysizemin=128, keysizemax=256
000 algorithm ESP auth attr: id=1, name=AUTH_ALGORITHM_HMAC_MD5,
keysizemin=128, keysizemax=128
000 algorithm ESP auth attr: id=2, name=AUTH_ALGORITHM_HMAC_SHA1,
keysizemin=160, keysizemax=160
000 algorithm ESP auth attr: id=5, name=AUTH_ALGORITHM_HMAC_SHA2_256,
keysizemin=256, keysizemax=256
000 algorithm ESP auth attr: id=251, name=(null), keysizemin=0, keysizemax=0
000
000 algorithm IKE encrypt: id=5, name=OAKLEY_3DES_CBC, blocksize=8,
keydeflen=192
000 algorithm IKE encrypt: id=7, name=OAKLEY_AES_CBC, blocksize=16,
keydeflen=128
000 algorithm IKE hash: id=1, name=OAKLEY_MD5, hashsize=16
000 algorithm IKE hash: id=2, name=OAKLEY_SHA1, hashsize=20
000 algorithm IKE dh group: id=2, name=OAKLEY_GROUP_MODP1024, bits=1024
000 algorithm IKE dh group: id=5, name=OAKLEY_GROUP_MODP1536, bits=1536
000 algorithm IKE dh group: id=14, name=OAKLEY_GROUP_MODP2048, bits=2048
000 algorithm IKE dh group: id=15, name=OAKLEY_GROUP_MODP3072, bits=3072
000 algorithm IKE dh group: id=16, name=OAKLEY_GROUP_MODP4096, bits=4096
000 algorithm IKE dh group: id=17, name=OAKLEY_GROUP_MODP6144, bits=6144
000 algorithm IKE dh group: id=18, name=OAKLEY_GROUP_MODP8192, bits=8192
000
000 stats db_ops.c: {curr_cnt, total_cnt, maxsz} :context={0,0,0}
trans={0,0,0} attrs={0,0,0}
000
000 "road-to-gate":
255.255.0.0/24===172.16.12.33[@r119-lnx-e01]...172.16.0.254---%any[@r119-lnx-e03];
unrouted; eroute owner: #0
000 "road-to-gate":     srcip=unset; dstip=unset; srcup=ipsec _updown;
dstup=ipsec _updown;
000 "road-to-gate":   ike_life: 3600s; ipsec_life: 28800s; rekey_margin:
540s; rekey_fuzz: 100%; keyingtries: 0
000 "road-to-gate":   policy: RSASIG+ENCRYPT+TUNNEL+PFS; prio: 24,32;
interface: eth1;
000 "road-to-gate":   newest ISAKMP SA: #0; newest IPsec SA: #0;
000
000
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20070523/652e9cd9/attachment.html