PLEASE HELP (openswan ipsec) (+)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I have got two linux boxes with fc5 on it. one has a static external IP, 
another one is connected via cisco and uses address mapping - from the 
external cisco IP to a "fake" internal.

How do I set up a net-to-net connection?
Example conf:

conn net-to-net
    left=212.220.1.2               # Local vitals
    leftsubnet=192.0.2.128/29      # 
    leftid=@xxxxxxxxxxxxxx         #   
    leftrsasigkey=0s1LgR7/oUM...   #
    leftnexthop=%defaultroute      # correct in many situations 
    right=212.220.1.1              # Remote vitals
    rightsubnet=10.0.0.0/24        #
    rightid=@xxxxxxxxxxxxxx        # 
    rightrsasigkey=0sAQOqH55O...   #
    rightnexthop=%defaultroute     # correct in many situations
    auto=start                     # authorizes but doesn't start this 
                                   # connection at startup

But whike speaking with .2 IP, it actually statically maps to 172.x.x.x 
address of linux box. It is possible to send data from mapped linux, and the 
packets come out with normal 212.220.1.2 IP (mapped back).

OpenSwan IPSec however, according to logs, somehow discovers 172.x.x.x address 
and refuses to negotiate....

-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux