IPv6 readyNote: This archive passes through spamassassin. Every mail marked with the subject "*****SPAM*****" has exceed a certain threshold of spam-like behaviour.

[Users] problem with vpn connection over internet

From: Martin Lang (m.lang_at_thiesen.com)
Date: Wed May 29 2002 - 11:18:51 CEST

Hello!
I'm a absolutely newbie in this field...
i will put into practice the following layout:
(vpn server try a connection to vpn server 2)

LAN1: VPN SERVER1
LAN1: |
LAN1: |
LAN1: LINUX ROUTER (Suse 8.0)
LAN1: |
LAN1: LINUX FIREWALL (red-hat flash-disk
router/firewall(iptables))
LAN1: |
LAN1: INTERNET GATEWAY (a win2k server with an tiscali
sat modem)
INTERNET: ||
INTERNET: ||
INTERNET: ||
INTERNET: ||
INTERNET: ||
LAN2: VPN SERVER 2 (suse linux 7.3 machine)

first i make a few exercises,
i put "vpn server 1" and "vpn server 2" in one network without any
routers, firewalls or other stuff.
both were in the same network and ip range.
after a pair trys it works. so i go on and
actualized this layout, but i doesnt became a connection,
i have problems with the preferences in ipsec.conf!
here i post the config files from the two vpn server:

vpn server 1:
config setup
        interfaces="%defaultroute"
        klipsdebug=all
        plutodebug=all
        plutoload=%search
        plutostart=%search

conn %default
        type=tunnel
        keyingtries=0
        authby=rsasig

conn head-branch
        leftid=@kontor.domain.de
        leftrsasigkey=0sAQO4lII.................
        left=192.168.1.9
        leftnexthop=192.168.1.2
        #leftsubnet=192.168.1.0/24
        #right
        rightid=@th-serv2.domain.de
        rightrsasigkey=0sAQNo........
        right=217.3.196.107
        rightnexthop=192.168.1.9
        #rightsubnet=192.168.1.0/24
        auto=add

and
vpn server 2:

config setup
        interfaces="%defaultroute"
        klipsdebug=all
        plutodebug=all
        plutoload=%search
        plutostart=%search

conn %default
        type=tunnel
        keyingtries=0
        authby=rsasig

conn head-branch
        leftid=@thiesen.domain.de
        leftrsasigkey=0sAQO4......
        left=217.199.42.76
        leftnexthop=217.5.106.33
        leftsubnet=217.159.52.0/24
        #right
        rightid=@th-serv2.domain.de
        rightrsasigkey=0sAQNog......
        right=217.3.196.107
        rightnexthop=217.5.106.33
        rightsubnet=217.3.196.0/24
        auto=add

i hope anybody can help me.
ciao

_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users

This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:20:07 CEST