[Openswan Users] but no connection has been authorized with policy=PSK

Mohsen B.Sarmadi mohsen.bsarmadi at gmail.com
Thu Nov 28 16:31:54 UTC 2013


Dear all,
I am using a EC2 Ubuntu 12.04 LTS instance in AWS.
I used all of the configurations from here(
http://fortycloud.com/setting-up-ipsecopenswan-in-amazon-ec2/), but in
auth.log i am keep getting

Nov 28 16:12:22 ip-10-164-25-201 *pluto*[6268]: packet from
myComputerIP:500: initial Main Mode message received
on myEC2PrivateIP:500 but no connection has been authorized with policy=PSK
$cat /etc/ipsec.secrets
@myEC2PrivateIP %any: PSK "123"

$ sudo cat /etc/ipsec.conf
config setup
   protostack=netkey
   interfaces=%defaultroute
   nat_traversal=yes
# this will force openswan to use IPSec over UDP - required for EC2
   force_keepalive=yes
   keep_alive=60
   virtual_private=%v4:172.24.0.0/16
# this Subnet must include range provided in the xl2tpd config file
   oe=no
   nhelpers=0
conn RWConn # road warrior connection description
   rightsubnet=vhost:%priv
   type=transport
   authby=secret
   pfs=no
   rekey=no
   ikelifetime=8h
   keylife=1h
   leftprotoport=17/1701
   left= myEC2PrivateIP
   leftid=@myEC2PrivateIP
   rightprotoport=17/%any
   right=%any
   auto=ignore



$ sudo cat /etc/xl2tpd/xl2tpd.conf
[global]
ipsec saref = yes
; this must be the private EC2 address allocated to eth0
listen-addr = myEC2PrivateIP
[lns default]
; addresses to road road warriors will be allocated from this range
ip range = 172.24.100.1-172.24.100.254
; GW virtual address (must be outside of the above range)
local ip = 172.24.0.150
refuse pap = yes
require authentication = yes
name = MyGW
; points to PPP config file (you can choose your own name)
pppoptfile = /etc/ppp/options.xl2tpd
length bit = yes

please help me on this.
thanks
Mohs
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openswan.org/pipermail/users/attachments/20131128/6cf7d45f/attachment-0001.html>


More information about the Users mailing list