[Openswan Users] problem setting up the roadwarriors
Paul Wouters
paul at xelerance.com
Thu May 24 17:23:59 EDT 2007
On Wed, 23 May 2007, TESTVPN R119LNXADM wrote:
> 029 "road-to-gate": cannot initiate connection without knowing peer IP
> address (kind=CK_TEMPLATE)
> conn road-to-gate
> left=172.16.12.33 # Gateway's information
> leftid=@r119-lnx-e01 #
> leftsubnet=255.255.0.0/24 #
> leftrsasigkey=0sAQNn+
> #
> rightnexthop=172.16.0.254 # Correct in many situations
> right=%any # Wildcard: we don't know the
> laptop's IP
> rightid=@r119-lnx-e03 #
> rightrsasigkey=0sAQPNAN
> #
> auto=start # authorizes but doesn't start
You changed the auto line without changing the comment.
You need auto=add to "authorizes but doesn't start". You have auto=start
which means "initiate now" but you do not know where to initiate TO (because
the other end is a dynamic ip road warrior).
Paul
More information about the Users
mailing list