IPv6 readyNote: This archive passes through spamassassin. Every mail marked with the subject "*****SPAM*****" has exceed a certain threshold of spam-like behaviour.

[Users] Problems connecting FreeSWAN 1.98 to a Netscreen 5

From: Corey Rogers (corey_at_wamcodm.com)
Date: Mon Jul 08 2002 - 17:00:07 CEST

I'm having some difficulty connecting my FreeSwan box to a Netscreen. I
have set this up internally within the office with success but I am
unable to get it working at a client site. Phase 1 reports a success but
phase 2 fails.

Can anyone give me advice on dealing with FreeSwan and netscreens
especially the netscreen 5?

I have actually downloaded this full mailing list but nothing seems to
work.

Below is my network config;

10.254.250.0/24 ->10.254.250.242 ======== 10.31.5.10 <-> 10.200.10.254
-> 10.200.10.0/24

I've done a lot of experimenting in vain. So any advice is appreciated.

FreeSWAN box;

eth0 10.254.2.242
eth1 10.254.250.242

# basic configuration
config setup
        interfaces="ipsec0=eth1"
        klipsdebug=none
        plutodebug=none
        plutoload=%search
        plutostart=%search
        uniqueids=yes

# defaults for subsequent connection descriptions
conn %default
        type=tunnel
        keyingtries=1
        keylife=2h
        disablearrivalcheck=no
        authby=secret
        right=%any

#VPN to test netscreen 5
conn netscreen
        left=10.254.250.242
        leftsubnet=10.254.250.0/24
        right=10.31.5.10
        rightnexthop=10.200.10.254
        rightsubnet=10.200.10.0/24
        keyexchange=ike
        auth=esp
        authby=secret
        auto=add 

-- 
Corey Rogers
Junior System Administrator
Wamco Technology Group Ltd (Barbados)
#3 Mahogany Court, Wildey, St. Michael
Phone: (246)437-3154 FAX: (246)228-4319

_______________________________________________ Users mailing list Users_at_lists.freeswan.org http://lists.freeswan.org/mailman/listinfo/users

This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:20:19 CEST