Hi Vasiliy
Change your left=freeswan to left=IP_address when IP_address is your
external freeswan IP address
Regards
Ignat
-----Original Message-----
From: Vasiliy Boulytchev [mailto:vasiliy_at_boulytcheva.com]
Sent: Wednesday, 8 May 2002 7:00
To: users_at_lists.freeswan.org
Subject: [Users] LAN=1.97FreeSWAN=gateway=gateway=SonicWall=RoadWarrior
Ladies and Gents,
What's wrong with my setup?
ipsec.conf section:
conn %default
keyingtries=1
keyexchange=ike
authby=rsasig
leftrsasigkey=%cert
rightrsasigkey=%cert
type=tunnel
left=freeswan
leftnexthop=router
leftsubnet=10.0.0.0/24
ikelifetime=240m
keylife=60m
pfs=yes
compress=no
auto=add
disablearrivalcheck=no
conn billb
right=24.221.200.83
rightcert=billb.coinfotech.com.pem
leftcert=bluespruce.coinfotech.com.pem
rightnexthop=24.221.200.80
cannot respond to IPsec SA request because no connection is known for
10.0.0.0/24===freeswan[C=US, ST=Colorado, L=Colorado Springs, O=Colorado
Information Technologies, Inc., OU=ISP, CN=BlueSpruce,
E=admin_at_bluespruce.coinfotech.com]...sonicwall[C=US
<mailto:E=admin_at_bluespruce.coinfotech.com]...sonicwall[C=US> , ST=CO,
L=Colorado Springs, O=CIT, OU=ISP, CN=BillB,
E=billb_at_coinfotech.com]===192.168.168.7/32
<mailto:E=billb_at_coinfotech.com]===192.168.168.7/32>
Vasiliy Boulytchev
Colorado Information Technologies Inc.
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:19:57 CEST