All pastes #2093063 Raw Edit

Someone

public text v1 · immutable
#2093063 ·published 2011-11-08 13:04 UTC
rendered paste body
yggdrasil@Thomas:~$ sudo ipsec setup --stop
ipsec_setup: Stopping Openswan IPsec...
yggdrasil@Thomas:~$ sudo ipsec setup --start
ipsec_setup: Starting Openswan IPsec 2.6.28...
ipsec_setup: No KLIPS support found while requested, desperately falling back to netkey
ipsec_setup: NETKEY support found. Use protostack=netkey in /etc/ipsec.conf to avoid attempts to use KLIPS. Attempting to continue with NETKEY
yggdrasil@Thomas:~$ sudo ipsec whack --listen
002 listening for IKE messages
003 NAT-Traversal: Trying new style NAT-T
003 NAT-Traversal: ESPINUDP(1) setup failed for new style NAT-T family IPv4 (errno=19)
003 NAT-Traversal: Trying old style NAT-T
002 adding interface eth1/eth1 10.0.0.105:500
002 adding interface eth1/eth1 10.0.0.105:4500
002 adding interface lo/lo 127.0.0.1:500
002 adding interface lo/lo 127.0.0.1:4500
002 adding interface lo/lo ::1:500
002 loading secrets from "/etc/ipsec.secrets"
yggdrasil@Thomas:~$ sudo ipsec whack --name southwestcare --initiate
002 "southwestcare" #1: initiating Main Mode
104 "southwestcare" #1: STATE_MAIN_I1: initiate
003 "southwestcare" #1: ignoring unknown Vendor ID payload [5b362bc820f60007]
003 "southwestcare" #1: Can't authenticate: no preshared key found for `@GroupVPN' and `@0006V108EDE8'.  Attribute OAKLEY_AUTHENTICATION_METHOD
003 "southwestcare" #1: no acceptable Oakley Transform
214 "southwestcare" #1: STATE_MAIN_I1: NO_PROPOSAL_CHOSEN
002 "southwestcare" #1: sending notification NO_PROPOSAL_CHOSEN to 67.130.216.184:500


<<<<Begin conf :::::::

conn southwestcare
       type=tunnel
       left=10.0.0.105
       #left=%defaultroute #your IP address
       leftid=@GroupVPN #don't modify this value
       leftxauthclient=yes
       right=mail.southwestcare.org #IP address of the sonicwall firewall
       rightsubnet=192.168.168.0/24 #Subnet of LAN behind the firewall
       rightxauthserver=yes
       rightid=@0006V108EDE8 #Sonicwall Unique Firewall Identifier
       keyingtries=0
       pfs=no
       aggrmode=no
       keyexchange=ike
       auto=add
       auth=esp
       esp=3DES-SHA1
       ike=3DES-SHA1
       authby=secret