Hi, you should simply post your /etc/freeswan/ipsec.conf files: left AND right.
if this is ok, then the problem comes from the certificate setup .. >"Jason Whitman" <[EMAIL PROTECTED]> writes: > This VPN setup has turned into a battle. I have followed the directions > (online docs) for setting up a MNF to MNF VPN. I have set up both firewalls > with the fw wan port 500 tcp+udp as directed in a message on the mailing > list. My logs for the left side are as follows: > > Oct 15 23:04:13 pluto[11479]: loaded host cert file '/etc/freeswan/ipsec. > d/local.machine.crt' (1326 bytes) > Oct 15 23:04:13 pluto[11479]: loaded host cert file '/etc/freeswan/ipsec. > d/remote.machine.crt' (1326 bytes) > Oct 15 23:04:13 pluto[11479]: added connection description "right.fw-vpn" > Oct 15 23:04:13 pluto[11479]: listening for IKE messages > Oct 15 23:04:13 pluto[11479]: adding interface ipsec0/eth1 1.1.1.1 > Oct 15 23:04:13 pluto[11479]: loading secrets from > "/etc/freeswan/ipsec.secrets" > Oct 15 23:04:13 pluto[11479]: loaded private key file > '/etc/freeswan/ipsec.d/private/local.machine.key' (1675 bytes) > Oct 15 23:04:13 pluto[11479]: "right.fw" #1: initiating Main Mode > Oct 15 23:04:14 pluto[11479]: "right.fw-vpn" #1: Peer ID is > ID_DER_ASN1_DN: 'C=US, ST=, L=, O=, OU=, CN=, E=' > Oct 15 23:04:14 pluto[11479]: "right.fw-vpn" #1: ISAKMP SA established > Oct 15 23:04:14 pluto[11479]: "right.fw-vpn" #2: initiating > Quick Mode RSASIG+ENCRYPT+COMPRESS+TUNNEL+PFS > Oct 15 23:04:14 pluto[11479]: "right.fw-vpn" #2: sent QI2, IPsec SA > established > Oct 15 23:04:23 pluto[11479]: "right.fw-vpn" #1: received Delete SA payload: > replace IPSEC State #2 in 10 seconds > Oct 15 23:04:23 pluto[11479]: "right.fw-vpn" #1: received Delete SA payload: > deleting ISAKMP State #1 > Oct 15 23:04:23 pluto[11479]: ERROR: asynchronous network error report on > eth1 for message to 2.2.2.2 port 500, complainant 2.2.2.2: Connection > refused [errno 111, origin ICMP type 3 code 3 (not authenticated)] > Oct 15 23:04:26 pluto[11479]: "right.fw-vpn" #3: responding to Main Mode > Oct 15 23:04:27 pluto[11479]: "right.fw-vpn" #3: Peer ID is > ID_DER_ASN1_DN: 'C=US, ST=, L=, O=, OU=, CN=, E=' > Oct 15 23:04:27 pluto[11479]: "right.fw-vpn" #3: sent MR3, ISAKMP SA > established > Oct 15 23:04:27 pluto[11479]: "right.fw-vpn" #4: responding to Quick Mode > Oct 15 23:04:27 pluto[11479]: "right.fw-vpn" #4: IPsec SA established > > My logs for the right side connection are as follows: > > Oct 15 23:04:25 ipsec__plutorun: Starting Pluto subsystem... > Oct 15 23:04:25 pluto[24938]: Starting Pluto (FreeS/WAN Version 1.98b) > Oct 15 23:04:25 pluto[24938]: including X.509 patch (Version 0.9.15) > Oct 15 23:04:25 pluto[24938]: Changing to directory '/etc/freeswan/ipsec.\ > d/cacerts' > Oct 15 23:04:25 pluto[24938]: loaded cacert file 'ca.crt' (1325 bytes) > Oct 15 23:04:25 pluto[24938]: Changing to directory '/etc/freeswan/ipsec.\ > d/crls' > Oct 15 23:04:25 pluto[24938]: loaded crl file 'crl.crt' (697 bytes) > Oct 15 23:04:25 pluto[24938]: loaded my default X.509 cert file '/etc/f\ > reeswan/x509cert.der' (1325 bytes) > Oct 15 23:04:26 pluto[24938]: loaded host cert file '/etc/freeswan/ipse\ > c.d/local.machine.crt' (1325 bytes) > Oct 15 23:04:26 pluto[24938]: loaded host cert file '/etc/freeswan/ipse\ > c.d/remote.machine.crt' (1325 bytes) > Oct 15 23:04:26 pluto[24938]: added connection description "left.fw-vpn" > Oct 15 23:04:26 pluto[24938]: listening for IKE messages > Oct 15 23:04:26 pluto[24938]: adding interface ipsec0/eth1 2.2.2.2 > Oct 15 23:04:26 pluto[24938]: loading secrets from > "/etc/freeswan/ipsec.secrets" > Oct 15 23:04:26 pluto[24938]: loaded private key file > '/etc/freeswan/ipsec.d/private/local.machine.key' (1674 bytes) > Oct 15 23:04:26 pluto[24938]: "left.fw-vpn" #1: initiating Main Mode > Oct 15 23:04:27 pluto[24938]: "left.fw-vpn" #1: Peer ID is ID_DER_ASN1_DN: > 'C=US, ST=, L=, O=, OU=, CN=, E=' > Oct 15 23:04:27 pluto[24938]: "left.fw-vpn" #1: ISAKMP SA established > Oct 15 23:04:27 pluto[24938]: "left.fw-vpn" #2: initiating Quick Mode > RSASIG+ENCRYPT+COMPRESS+TUNNEL+PFS > Oct 15 23:04:27 pluto[24938]: "left.fw-vpn" #2: sent QI2, IPsec SA > established > Oct 15 23:04:43 pluto[24938]: "left.fw-vpn" #1: ignoring Delete SA payload: > IPSEC SA not found (maybe expired) > > I cannot ping hosts on either network. I am stumped on this one. Any ideas > would be appreciated. > > Jason > > > ____________________________________________________ > Want to buy your Pack or Services from MandrakeSoft? > Go to http://www.mandrakestore.com > Join the Club : http://www.mandrakeclub.com > ____________________________________________________ -- Florin http://www.mandrakesoft.com http://people.mandrakesoft.com/~florin/
____________________________________________________ Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com Join the Club : http://www.mandrakeclub.com ____________________________________________________
