Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 2 subscribers
  • Views 1588 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Problem routing traffic through vpn...

Neel
I have a problem with my vpn connection. This is what it shows as my status on Version 4.022:

000 
000 "Maid_TH_VPN_1": 192.168.5.0/24===80.42.136.130[@adrienmaid.dyndns.org]...82.44.97.155[@neelbhatt.dyndns.org]===192.168.2.100/32
000 "Maid_TH_VPN_1": CAs: '%any'...'%any'
000 "Maid_TH_VPN_1": ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "Maid_TH_VPN_1": policy: RSASIG+ENCRYPT+TUNNEL+PFS; interface: eth1; unrouted
000 "Maid_TH_VPN_1": newest ISAKMP SA: #0; newest IPsec SA: #0; eroute owner: #0
000 "Maid_TH_VPN_1": IKE algorithms wanted: 5_000-1-5, flags=-strict
000 "Maid_TH_VPN_1": IKE algorithms found: 5_192-1_128-5, 
000 "Maid_TH_VPN_1": ESP algorithms wanted: 12_128-1, ; pfsgroup=5; flags=-strict
000 "Maid_TH_VPN_1": ESP algorithms loaded: 12_128-1_128, 
000 
000 #1: "Maid_TH_VPN_1" STATE_MAIN_I1 (sent MI1, expecting MR1); EVENT_RETRANSMIT in 8s
000 

And on the other side which is V5 this is what is shown on my status:

000 
000 "S_Maid_TH_VPN_0": 192.168.5.0/24===82.43.66.77[@neelbhatt.dyndns.org]...80.42.167.202[@adrienmaid.dyndns.org]===192.168.5.0/24
000 "S_Maid_TH_VPN_0": CAs: '%any'...'%any'
000 "S_Maid_TH_VPN_0": ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "S_Maid_TH_VPN_0": policy: RSASIG+ENCRYPT+TUNNEL+PFS; interface: eth3; unrouted
000 "S_Maid_TH_VPN_0": newest ISAKMP SA: #0; newest IPsec SA: #0; eroute owner: #0
000 "S_Maid_TH_VPN_0": IKE algorithms wanted: 5_000-1-5, flags=-strict
000 "S_Maid_TH_VPN_0": IKE algorithms found: 5_192-1_128-5, 
000 "S_Maid_TH_VPN_0": ESP algorithms wanted: 12_128-1, ; pfsgroup=5; flags=-strict
000 "S_Maid_TH_VPN_0": ESP algorithms loaded: 12_128-1_128, 
000 
000 #23: "S_Maid_TH_VPN_0" STATE_MAIN_I1 (sent MI1, expecting MR1); EVENT_RETRANSMIT in 36s
000 

Does anyone have any ideas?

Regards,
Neel


This thread was automatically locked due to age.
Parents
  • 0
    The subnet settings on both sides are completly different. On one side you have a 192.168.2.0/32 subnet and on the other two 192.168.5.0/24 subnets. Change the settings to the right value and the vpn tunnel should come up. Are you sure you want to use a /32 subnet? This will only allow one host to communicate with the other side.
    /bagira
  • 0 in reply to bagira
    I just realized, thanks for poiting that out. Yes i want to keep both ends at /32 for only one host to coomunicate to the remote end.

    Thankyou very much for your time, hopefully after i've changed it, it will work! 
  • 0 in reply to Neel
    I changed both subnets to /32. now it views this in the VPN Status:
    whack: Pluto is not running (no "/var/run/pluto.ctl")

    And in the VPN Routes it shows:

    :: IPSec Kernel Modules not loaded ::

    Any ideas? [:S]
    Regards
Reply
  • 0 in reply to Neel
    I changed both subnets to /32. now it views this in the VPN Status:
    whack: Pluto is not running (no "/var/run/pluto.ctl")

    And in the VPN Routes it shows:

    :: IPSec Kernel Modules not loaded ::

    Any ideas? [:S]
    Regards
Children