IPv6 readyNote: This archive passes through spamassassin. Every mail marked with the subject "*****SPAM*****" has exceed a certain threshold of spam-like behaviour.

Re: [Users] no connection known for

From: Ronny Egner (Freeswan_at_boddenland.de)
Date: Thu May 30 2002 - 20:28:03 CEST


----- Original Message -----
From: "Nate Carlson" <natecars+freeswan_at_natecarlson.com>
To: "Ronny Egner" <Freeswan_at_Boddenland.DE>
Cc: <users_at_lists.freeswan.org>
Sent: Thursday, May 30, 2002 6:42 PM
Subject: Re: [Users] no connection known for

> On Thu, 30 May 2002, Ronny Egner wrote:
> > What does the error message
> >
> > ""siv" #3: cannot respond to IPsec SA request because no connection is
> > known for 192.9.222.0/24===62.159.207.34...193.158.30.131"
> >
> > mean ??
> >
> > My VPN-structure
> >
> >
> > right side
> > left side
> >
> >
192.9.222.0===62.159.207.34---62.159.207.33............193.158.30.129---193.
> > 158.30.131===172.23.0.0
> > (Intranet) (VPN-Gateway) (Router)
> > (Router) (VPN-Gateway) (Intranet)
>
> It means exactly what it's saying -- that it doesn't know about a
> connection for that.
>
> Can you show us a copy of your ipsec.conf? Can't help you without that.
> :)

Of course:

Here you are:

## cat /etc/ipsec.conf ##

config setup
        interfaces=%defaultroute
        klipsdebug=none
        plutodebug=all
        plutoload=%search
        plutostart=%search
        #uniqueids=yes

conn %default
        keyingtries=1
        authby=secret

# connection to siv-vpn-gateway using preshared secret
conn siv
        keyexchange=ike
        ikelifetime=240m
        keylife=60m
        type=tunnel
        pfs=no
        compress=no
        left=193.158.30.131
          leftsubnet=172.23.0.0/16
          right=62.159.207.34
          rightnexthop=62.159.207.33
          leftnexthop=193.158.30.129
          rightsubnet=0.0.0.0/0
        auto=start

193.158.30.131 is the destination vpn-gateway.
193.158.30.129 is the router for the whole subnet
193.158.30.128/255.255.255.248

62.159.207.34 is the IP on the local VPN-Gateway. 62.159.207.33 is the
router.

Now any ideas ?

Thanks. Ronny

_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users



This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:20:08 CEST