Hi Guys,

Am trying to setup a VPN connection between my dedicated server in the cloud
to Mobile Service provider.
Am Using Centos running OpenSwan while they have a Cisco ASA 5540,

The tunnel comes up but I cannot ping there end of the local subnet, I think
the problem is my routing
Please look at my ipsec.conf file below and advice


version 2.0     # conforms to second version of ipsec.conf specification

# basic configuration
config setup
    # Debug-logging controls:  "none" for (almost) none, "all" for lots.
        # interface=%defaultroute
        # klipsdebug=none
        # plutodebug="control parsing"
        # For Red Hat Enterprise Linux and Fedora, leave protostack=netkey
        protostack=netkey
        nat_traversal=no
        virtual_private=
        oe=off
        # Enable this if you see "failed to find any available worker"
        nhelpers=0

conn me2Cisco # Here is the Name of the VPN connection.
        type= tunnel
        authby= secret
        # Left My Side of the Tunnel
        left=X.X.X.2 #REAL IP LINUX SERVER
        leftsubnet=192.168.199.0/24 #Net address assigned to the other side
        leftsourceip=192.168.199.1
        leftnexthop= X.X.X.1 #Real IP Gateway
        # Right security gateway, (ASA SIDE)
        right= Y.Y.Y.1 # ASA IP
        rightsubnet= 10.50.12.42/32  # Net address assigned to the other
side
        rightnexthop=Y.Y.Y.1
        # Type of cryptogrphy used on the VPN Tunnel
        #auth= esp
        esp= 3des-md5-96
        keyexchange= ike
        #ike= 3des-md5-modp1024
        pfs= no
        auto= start


Regards 

Billy 
                          
_______________________________________________
LUG mailing list
[email protected]
http://kym.net/mailman/listinfo/lug

LUG is generously hosted by INFOCOM http://www.infocom.co.ug/

All Archives can be found at http://www.mail-archive.com/[email protected]/

The above comments and data are owned by whoever posted them (including 
attachments if any). The List's Host is not responsible for them in any way.
---------------------------------------

Reply via email to