<div dir="ltr"><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font>i finaly soled it problem, my configs are :<br></font></span></div><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font><br>
</font></span></div><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font><br></font></span></div><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font>cisco config is :<br>
</font></span></div><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font>Router1#<br>hostname Router1<br>crypto isakmp policy 5<br> encr 3des<br> hash md5<br> authentication pre-share<br>
group 2<br> lifetime 3600 <br>crypto isakmp key 123456 address 192.168.0.1<br><br>!<br>crypto ipsec transform-set MINE esp-3des esp-md5<br>!<br><br>ip access-list extended IPSEC<br>permit ip 10.2.0.0 0.0.255.255 10.1.0.0 0.0.255.255<br>
<br><br>!<br>crypto map MYMAP 10 Ipsec-isakmp<br>----set security-association lifetime seconds 3600<br> set peer 192.168.0.1<br> set transform-set MINE<br> match address IPSEC<br>!<br>!<br>!<br>!<br>interface fastEthernet1/1<br>
ip address 192.168.0.2 255.255.255.0<br> no shutdown<br> duplex auto<br> speed auto<br> crypto map MYMAP <br>!<br>interface Ethernet1/0<br> ip address 10.2.0.1 255.255.0.0<br> duplex auto<br> speed auto<br>no shutdown<br>
<br>!<br>ip route 0.0.0.0 0.0.0.0 192.168.0.1<br>!<br>!<br></font></span></div><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font><br></font></span></div><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font><br>
</font></span></div><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font><br></font></span></div><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font><br>
</font></span></div><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font>Linux config i s:<br></font></span></div><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font><br>
</font></span></div><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font># /etc/ipsec.conf - strongSwan IPsec configuration file<br><br>config setup<br><br>conn %default<br> ikelifetime=3600s<br>
keylife=3600s<br> keyexchange=ikev1<br> authby=secret<br><br>conn net-net <br> left=192.168.0.1<br> leftsubnet=<a href="http://10.1.0.0/16">10.1.0.0/16</a><br> leftfirewall=yes<br> right=192.168.0.2<br> rightsubnet=<a href="http://10.2.0.0/16">10.2.0.0/16</a><br>
ike=3des-md5-modp1024<br> esp=3des-md5<br> type=tunnel<br> auto=start<br><br></font></span></div><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font><br></font></span></div><div class="gmail_extra">
<span style="border-collapse:collapse;line-height:21px"><font><br></font></span></div><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font><br></font></span></div><div class="gmail_extra">
<span style="border-collapse:collapse;line-height:21px"><font><br></font></span></div><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font><br></font></span></div><div class="gmail_extra">
<span style="border-collapse:collapse;line-height:21px"><font><br></font></span></div><div class="gmail_extra"><span style="border-collapse:collapse;line-height:21px"><font><br></font></span></div><div class="gmail_extra">
<font size="4" color="#454545"><span style="border-collapse:collapse;line-height:21px"><b><u><br></u></b></span></font></div><div class="gmail_extra"><font size="4" color="#454545"><span style="border-collapse:collapse;line-height:21px"><b><u><br>
</u></b></span></font></div><div class="gmail_extra"><font size="4" color="#454545"><span style="border-collapse:collapse;line-height:21px"><b><i><u><br></u></i></b></span></font>
</div></div>