[Openswan Users] OpenSwan not working with nat-t

Paul Wouters paul at xelerance.com
Mon Apr 6 21:32:06 EDT 2009


On Mon, 6 Apr 2009, CrashOverload at gmx.de wrote:

> I got only the following information about encryption and that the remote gateway is supporting NAT-T:
> 3 des  sha1 group 2

> And that´s my part of the vpn:

> conn vpn
>        auth=esp
>        authby=secret
>        auto=add
>        forceencaps=yes
>        left=77.88.99.21        #Local Public IP
>        leftid=77.88.99.21
>        leftsubnet=192.168.168.66/32
>        pfs=yes
>        right=112.113.114.115   #Remote Public IP
>        rightid=112.113.114.115
>        rightsubnet=192.168.156.55/32
>        type=tunnel

So add:

 	ike=3des-sha1-modp1024
 	esp=3des-sha1

> Is there anything in the configuration missing or wrong?

show the logs with the errors?

Paul


More information about the Users mailing list