[Openswan Users] openswan VPN between OpenSWAN and a client vpn

[santi santi santi]

Thanks Pau





I do not know how to upgrade, do not get










 

> ipsec
verify

Checking
your system to see if IPsec got installed and started correctly:

Version
check and ipsec on-path                              [OK]

Linux
Openswan U2.4.9/K2.6.24-24-generic (netkey)

Checking for
IPsec support in kernel                       
 [OK]

NETKEY
detected, testing for disabled ICMP send_redirects    [OK]

NETKEY
detected, testing for disabled ICMP accept_redirects  [OK]

Checking for
RSA private key (/etc/ipsec.secrets)          
 [OK]

Checking
that pluto is running                               [OK]

Two or more
interfaces found, checking IP forwarding     
   [OK]

Checking NAT
and MASQUERADEing                             
 [OK]

Checking for
'ip' command                                  
 [OK]

Checking for
'iptables' command                            
 [OK]

> Date: Mon, 27 Apr 2009 12:34:54 -0400
> From: paul at xelerance.com
> To: santi-ti at hotmail.com
> CC: users at openswan.org
> Subject: Re: [Openswan Users] openswan VPN between OpenSWAN and a client vpn
> 
> On Mon, 27 Apr 2009, santi santi santi wrote:
> 
> > This problem with Openswan version U2.4.9/K2.6.24-24-generic.
> 
> upgrade to at least 2.4.14.
> 
> > conn tunel
> >                 auth=esp
> >                 authby=secret
> >                 auto=add
> >                 compress=no
> >                 dpdaction=clear
> >                 dpddelay=30
> >                 dpdtimeout=120
> >                 esp=aes128-sha1
> >                 ike=aes128-sha
> >                 ikelifetime=60m
> >                 keyingtries=3
> >                 keylife=20m
> >                 left=172.16.0.10
> >                 leftsubnet=172.16.0.0/24
> >                 leftnexthop=172.16.0.1
> >                 pfs=no
> >                 rekeymargin=3m
> >                 right=%any
> >                 rightsubnet=172.16.0.15/24
> 
> This tunnel will surely complete implode on itself. It lives on
> both sides of the tunnel AND it is using its own range to tunnel
> itself.
> 
> Paul

_________________________________________________________________
¿Quieres crear  tus propios emoticonos gratis? Descubre cómo hacerlo en el Club Oficial de Messenger  
http://vivelive.com/ilovemessenger/ 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20090428/69eeebee/attachment-0001.html