Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a server running Ubuntu and Openswan, but I'm not able to connect to the remote firewall. I hope that anybody can help me.

My ipsec.conf-file is as follows:

config setup
   protostack=netkey
   nat_traversal=yes
   nhelpers=0
   plutodebug=all

conn zyxel
   type=tunnel
   authby=secret

   left=*.*.*.* #min ip
   leftsubnet=*.*.*.*/* #mitt subnet
   leftid=@*** #brukernavn

   right=*.*.*.* #brannmurens ip
   rightsubnet=*.*.*.*/* #brannmurens subnet
   auth=esp
   ike=des-md5
   esp=des-sha1
   pfs=yes
   aggrmode=yes

I start openswan by running these commands:

/etc/init.d/ipsec start
ipsec auto --add zyxel
ipsec whack --name zyxel --initiate

Nothing show up in my terminal, but when i tail /var/log/auth.log I get the following error:

Aug 11 11:43:49 ole-VirtualBox pluto[28572]: | returning new proposal from esp_info
Aug 11 11:43:49 ole-VirtualBox pluto[28572]: | creating state object #1 at 0x927f8d8
Aug 11 11:43:49 ole-VirtualBox pluto[28572]: | processing connection zyxel
Aug 11 11:43:49 ole-VirtualBox pluto[28572]: | ICOOKIE: 24 cd d1 e4 b4 3d 65 a0
Aug 11 11:43:49 ole-VirtualBox pluto[28572]: | RCOOKIE: 00 00 00 00 00 00 00 00
Aug 11 11:43:49 ole-VirtualBox pluto[28572]: | state hash entry 16
Aug 11 11:43:49 ole-VirtualBox pluto[28572]: | inserting state object #1 on chain 16
Aug 11 11:43:49 ole-VirtualBox pluto[28572]: | inserting event EVENT_SO_DISCARD, timeout in 0 seconds for #1
Aug 11 11:43:49 ole-VirtualBox pluto[28572]: | event added at head of queue
Aug 11 11:43:49 ole-VirtualBox pluto[28572]: | oakley_alg_makedb() ike enc ealg=1 not present

I really hope that somebody has a clue of what to do, because I don't.

share|improve this question
    
are your local and remote subnets different? is the firewall allowing access from the vpn subnet/interface, also are you able to succesfully connect to the vpn? –  anthonysomerset Aug 12 '11 at 7:20

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.