[Openswan Users] Error: "initial Main Mode message received on 192.168.23.23:500 but no connection has been authorized"

[BUI18]

Thanks for responding.  Yes, Openswan is sitting behind a NAT router.

I thought that "left" is suppose to be the Openswan's internet gateway, which is why I specified 66.27.a.b.  I did a tcpdump on the Openswan server and indeed it was receiving an initialization request on udp port 500.

Any suggestion on what left, leftnexthop and right, rightnexthop should be for this to work?

thx

----- Original Message ----
From: Jacco de Leeuw <jacco2 at dds.nl>
To: users at openswan.org
Sent: Monday, April 7, 2008 6:15:00 AM
Subject: Re: [Openswan Users] Error: "initial Main Mode message received on 192.168.23.23:500 but no connection has been authorized"

BUI18 wrote:

> Can someone assist with this error?  I am trying to create a site to site
> between a D-Link DIR-130 VPN router and Openswan.

> plutodebug=all

Better use plutodebug=none, as this is unlikely to be a bug in Pluto.

> Apr  6 17:43:51 localhost pluto[20252]: packet from 66.27.113.46:500:
> initial Main Mode message received on 192.168.23.23:500 but no connection
> has been authorized

Apparently the Openswan server is behind NAT so it has the IP address
192.168.23.23 but you are specifying the NAT router's IP address in the
Openswan configuration:

> conn DIR130-JON
> left=66.27.a.b

Jacco
-- 
Jacco de Leeuw                        mailto:jacco2 at dds.nl
Zaandam, The Netherlands          http://www.jacco2.dds.nl


      ____________________________________________________________________________________
You rock. That's why Blockbuster's offering you one month of Blockbuster Total Access, No Cost.  
http://tc.deals.yahoo.com/tc/blockbuster/text5.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20080407/3d7a413d/attachment-0001.html