[Openswan Users] problems with natt, i think

[Paul Wouters]

On Thu, 11 Oct 2007, antonio wrote:

> hi, I'm try to establish an tunnel between two Linux machines. one is
> directly connect to internet, but the other it's connect behind a
> router. i can establish a connection between the two if the both are
> connect directly to internet.

> Oct 11 10:33:08 marces pluto[21262]: "tunel2" #1: cannot respond to
> IPsec SA request because no connection is known for
> 89.4.135.2[@tunel2-left]...89.4.135.1[@tunel2-right]===192.168.0.3/32

You probably did not configure NAT-T properly (See nat_traversal= and
virtual_private= and rightsubnet=vhost: options)

Paul

-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155