[Openswan Users] Error 789 from Windows XP

andy huang ah6511 at yahoo.com
Thu Nov 1 16:42:13 EDT 2007


Hi,

I am new to OpenSWAN as well as relatively new to
Linux. I tried to configure IPSec n following network:
XP--RT(192.168.0.0/24)--Ubuntu--RT(192.168.11.0/24)--Corp
Ububtu's eth0 is 192.168.11.2, which connects to Corp
thru router(192.168.11.1), eth1 is 192.168.0.3.
I tried to set up PSK based IPSec connection, so I
follow the guide and have following:
ipsec.conf:

version	2.0	

config setup
	nat_traversal=yes
conn l2tp
	authby=secret
	pfs=no
	keyingtries=3
	left=%defaultroute
	leftnexthop=%defaultroute
	leftprotoport=17/%any
	right=%any
	rightprotoport=17/%any
	auto=add

include /etc/ipsec.d/examples/no_oe.conf

ipsec.secrets:
192.168.0.3 %any : PSK "MySharedKey"

On XP(SP2) Box, i enabled NAT traversal for IPSec and
created a VPN connection following the
guide(http://www.jacco2.dds.nl/networking/win2000xp-openswan.html),
and then tried to connect, but always get error 789, I
use NmapFE and can see 500/udp, 4500/udp, ip protocol
50 are all open, and from ethereal on ubuntu also
shows ISAKMP packet come in to eth1 interface. 
Also I couldn't find /var/log/secure for log file on
my ubuntu. Is the log file in some place else?
Any advise is greatly appreciated.

-AH


More information about the Users mailing list