[Openswan Users] EC2 Instance trying to connect to Sonicwall via Openswan, not getting any IP and can't route
doug m
qrkyxboy at gmail.com
Wed Jul 31 19:39:01 UTC 2013
Working with a client and I'm thinking maybe the Sonicwall is at fault. I
am trying to use the Linux instance to connect to the VPN via Sonicwall so
it should be getting fed an IP from the 192.168.10.0/24 range but it gets
nothing. It authenticates and is showing connected.
004 "sonicwall" #2: STATE_QUICK_I2: sent QI2, IPsec SA established tunnel
mode {ESP=>0x9eb4577b <0xfde7e679 xfrm=3DES_0-HMAC_SHA1 NATOA=none
NATD=none DPD=none}
But I notice this in ipsec auto --status:
000 "sonicwall": myip=unset; hisip=unset;
Here is the config:
config setup
virtual_private=virtual_private=%v4:192.168.10.0/24
nat_traversal=yes
oe=off
protostack=netkey
plutodebug=none
interfaces=%defaultroute
conn sonicwall
type=tunnel
left=xxxxxxxxxxx.compute.amazonaws.com
leftnexthop=%defaultroute
leftsubnet=0.0.0.0/0.0.0.0
leftprotoport=17/1701
leftid=@GroupVPN
leftxauthclient=yes
leftxauthusername=XXXXXX
right=remote.server.com
rightsubnet=192.168.10.0/24
rightprotoport=17/0
rightxauthserver=yes
rightid=@XXXXXXXX # The sonicwall's UID
pfs=no
aggrmode=yes
keyexchange=ike
auto=add
auth=esp
esp=3des-sha1
ike=3des-sha1-modp1024
ikelifetime=8h
authby=secret
rekey=no
Not sure what next steps are -- there isn't much I haven't tried, any
suggestions?
thanks-
-doug
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openswan.org/pipermail/users/attachments/20130731/c1c87b65/attachment.html>
More information about the Users
mailing list