Hello all,<br><br>Iam having two VPN Servers behind NAT as show below.<br><br><br> ______________ ___________ ___________ _____________ __<br>
| 192.168.1.254 |_________| 192.168.1.1 | ___________________ | 192.168.1.1 |=====|192.168.1.254 (B) |<br>|_(PC A) _______| | 10.10.15.3 | ====> |10.10.15.1 (router) |=====>| 10.10.15.8 | |_______________ |<br>
-------------------- ---------------------------------- ---------------------<br><br>ipsec.conf currently iam using following at PC A<br><br><br><i>config setup<br>
charonstart=no<br> plutodebug=all<br> plutostderrlog=/var/pluto.txt<br> crlcheckinterval=180<br> strictcrlpolicy=no<br> nat_traversal=yes<br><br>conn %default<br> ikelifetime=60m<br>
keylife=20m<br> rekeymargin=3m<br> keyingtries=1<br> keyexchange=ikev1<br> auto=add<br> authby=secret<br><br>conn host-host<br> right=192.168.1.254<br> left=%defaultroute<br>
leftsubnet=<a href="http://192.168.1.0/24">192.168.1.0/24</a><br> leftnexthop=192.168.1.1<br> rightsubnet=<a href="http://192.168.1.0/24">192.168.1.0/24</a><br> rightnexthop=10.10.15.8<br> #rightid=@<a href="http://sun.strongswan.org">sun.strongswan.org</a><br>
auto=add<br> authby=secret<br><br><br></i><br><br>and ipsec.conf PC B.<br><br><i>config setup<br> charonstart=no<br> plutodebug=all<br> plutostderrlog=/var/pluto.txt<br> crlcheckinterval=180<br>
strictcrlpolicy=no<br> nat_traversal=yes<br><br>conn %default<br> ikelifetime=60m<br> keylife=20m<br> rekeymargin=3m<br> keyingtries=1<br> keyexchange=ikev1<br> auto=add<br>
authby=secret<br><br>conn host-host<br> right=192.168.1.254<br> left=%defaultroute<br> leftsubnet=<a href="http://192.168.1.0/24">192.168.1.0/24</a><br> leftnexthop=192.168.1.1<br> rightsubnet=<a href="http://192.168.1.0/24">192.168.1.0/24</a><br>
rightnexthop=10.10.15.3<br> #rightid=@<a href="http://sun.strongswan.org">sun.strongswan.org</a><br> auto=add<br> authby=secret<br><br></i><br><br><br>when i do ipsec up host-host i get error as below<br>
<br><br><b><i>022 "host-host": we have no ipsecN interface for either end of this connection</i></b><br><br><br>Where am i going wrong exactly can any body help me here<br><br>thanks<br>Rama Kanth<br><br><br>On Sun, Aug 19, 2012 at 12:27 PM, Andreas Steffen <<a href="mailto:andreas.steffen@strongswan.org">andreas.steffen@strongswan.org</a>> wrote:<br>
> You need the parameter<br>><br>> auto=add<br>><br>> because the default is auto=ignore which doesn't load the<br>> connection definition. pluto doesn't support left=%any,<br>> either defined an IP address or write<br>
><br>> left=%defaultroute<br>><br>> For the initiator you have to give an IP address for right so<br>> it can actively connect to the responder.<br>><br>> Regards<br>><br>> Andreas<br>><br>
> On 08/18/2012 05:07 PM, ramakanth varala wrote:<br>>> Hello all,<br>>><br>>> Iam new to strongswan, i am trying to run strongswan in my target<br>>> board and a RHEL6 machine connected to that .<br>
>><br>>> My aim is to run the strongswan VPN server on my target board with a<br>>> host-host tunnel to my linux machine connected to that.<br>>><br>>> There are lot of missing blocks for me.<br>
>><br>>> 1) When ever i try to run the ipsec ( either in my target board or in<br>>> my linux machine) with some configurations like below<br>>><br>>> ipsec.conf<br>>> ========<br>>><br>
>> config setup<br>>> #charonstart=no<br>>> plutostart=yes<br>>><br>>> conn %default<br>>> left=%any<br>>> right=%any<br>>> authby=psk<br>
>><br>>><br>>> ipsec.secrets<br>>> ===========<br>>> %any %any : PSK "123456"<br>>><br>>><br>>> i see that it does not show any thing when i type ipsec status<br>>><br>
>> 2) i oftenly see my ipsec.conf getting autogenerated and wiped out my<br>>> confiugrations which ever i kept<br>>><br>>> 3) Here my aim is to establish a simplist configuration to have VPN<br>>> tunnel between my target board and my LINUX machine. if any body can<br>
>> sugget a simple configuration related to it , that would be really<br>>> helpfull.<br>>><br>>> iam running strongswan 4.6.1<br>>><br>>> thanks<br>><br>> ======================================================================<br>
> Andreas Steffen <a href="mailto:andreas.steffen@strongswan.org">andreas.steffen@strongswan.org</a><br>> strongSwan - the Linux VPN Solution! <a href="http://www.strongswan.org">www.strongswan.org</a><br>
> Institute for Internet Technologies and Applications<br>> University of Applied Sciences Rapperswil<br>> CH-8640 Rapperswil (Switzerland)<br>> ===========================================================[ITA-HSR]==<br>
<br>