<div class="gmail_quote"><div>Hello all,</div><div> </div><div>Iam bit new to IPSec VPN and trying to figure it out how can run this VPNServer on my dual core board.</div><div> </div><div>First board is ARM with 10.10.16.8 (WAN) as its interface second interface on same board 192.168.1.1</div>
<div>Second board is ATOM runnig on 192.168.1.254 .</div><div> </div><div>Running VPN Server in ATOM and kept a DNAT at ARM using Iptable rules to follow all packets <a href="http://10.10.16.8:500" target="_blank">10.10.16.8:500</a> and <a href="http://10.10.16.8:4500" target="_blank">10.10.16.8:4500</a> to <a href="http://192.168.1.254:500" target="_blank">192.168.1.254:500</a> and <a href="http://192.168.1.254:4500" target="_blank">192.168.1.254:4500</a></div>
<div> </div><div>here is a typical block diagram with ip's.</div><div> </div><div>Here all ips can ping each other.</div><div> </div><div>router (10.90.200.1) ======= dual core board ( Wan board 10.10.15.8 | Lan board 192.168.1.254)</div>
<div>||</div><div>||=============== LAN PC (10.90.200.2)</div><div> </div><div> </div><div>my ipsec.conf is like below</div><div> </div><div># cat /var/etc/ipsec/ipsec.conf<br>config setup<br> charonstart=no<br> plutodebug=all<br>
plutostderrlog=/var/pluto.txt<br> nat_traversal=yes</div><div>conn %default<br> ikelifetime=10m<br> keylife=10m<br> rekeymargin=500s<br> rekeyfuzz=0%<br> keyingtries=1<br>
keyexchange=ikev1</div><div>conn host-host<br> right=10.90.200.2<br> xauth=server<br> left=%defaultroute<br> leftid=10.10.15.8<br> leftsubnet=<a href="http://192.168.1.1/24" target="_blank">192.168.1.1/24</a><br>
forceencaps=yes<br> leftfirewall=yes<br> rightsourceip=<a href="http://10.90.200.1/24" target="_blank">10.90.200.1/24</a><br> auto=add<br> modeconfig=push<br> authby=xauthpsk</div>
<div> </div><div>
</div><div>The error i see at /var/pluto.txt is like below when i initiate a connection from Remote IPSec Client at LAN PC</div><div> </div><div><em>| peer: 0a 5a c8 02<br>| state hash entry 27<br>| state object not found<br>
packet from <a href="http://10.90.200.2:4500" target="_blank">10.90.200.2:4500</a>: Quick Mode message is for a non-existent (expired?<br>| next event EVENT_REINIT_SECRET in 3397 seconds</em></div><div><em></em> </div><div>
<em></em> </div>
<div>Can you please guide me where am i going wrong.</div><div> </div><div>Your help would be highly appreciated.</div><span class="HOEnZb"><font color="#888888"><div> </div><div>--RamaKanth</div><div><br><br><font size="3"><font face="Times New Roman">
</font></font><font size="3"><font face="Times New Roman">
</font></font></div>
</font></span></div><br>