I'm farther along, but still stuck. Now I see with ipsec barf: First pluto complaining multiply:
We cannot identify ourselves with either end of this connection. 172.17.10.3 or xx.yy.zz.108 are not usable This is with xx.yy.zz.108 plainly available as an IP on a WAN interface. The other IP, on another interface, has no reference in the config. Then pluto advises: packet from aa.bb.cc.245:500: initial Main Mode message received on xx.yy.zz.108:500 but no connection has been authorized with policy PSK+IKEV1_ALLOW Note that's saying the message has been recieved on the IP which is "not usable." I assume the connection has not been "authorized" because it was previously rejected as "unusable"? What are the criteria for "usable"? Thanks, Whit
