[Users] cannot initiate connection without knowing peer IP address

Hello.

I am currently running FreeSwan 1.5 with connections to Checkpoint, Shiva etc.
I am now trying to set up a tunnel between us and a Nortel Contivity. I was having no luck with the 1.5 so I installed 1.99 on a separate box. I am getting "cannot initiate connection without knowing peer IP address" I cannot see the problem...

root@fswtest:/etc# ipsec auto --status
000 interface ipsec0/eth0 216.xxx.xx.x
000
000 "somecompany":64.x.xxx.xxx/32===216.xxx.xx.x---216.xxx.xx.x... 172.xx.x.x---207.xxx.xxx.xx===10.xxx.xx.xxx/32 000 "somecompany": ike_life: 3600s; ipsec_life: 3600s; rekey_margin: 540s;
rekey_fuzz: 100%; keyingtries: 1
000 "somecompany": policy: PSK+ENCRYPT+TUNNEL+PFS; interface: eth0; unrouted
000 "somecompany": newest ISAKMP SA: #0; newest IPsec SA: #0; eroute owner: #0

config setup

	# THIS SETTING MUST BE CORRECT or almost nothing will work;
	# %defaultroute is okay for most simple cases.
	interfaces="ipsec0=eth0"
	# Debug-logging controls:  "none" for (almost) none, "all" for lots.
	klipsdebug=none
	plutodebug=none
	# Use auto= parameters in conn descriptions to control startup actions.
	plutoload=%search
	plutostart=%search
	# Close down old connection when new one using same ID shows up.
	uniqueids=yes

# defaults for subsequent connection descriptions # (these defaults will soon go away)
conn %default

	keyingtries=1
	disablearrivalcheck=no

conn somecompany
	left=216.xxx.xx.x
	leftsubnet=64.x.xxx.xxx/32
	leftnexthop=216.xxx.xx.x
	right=207.xxx.xxx.xx
	rightsubnet=10.xxx.xx.xxx/32
	rightnexthop=172.xx.x.x
	keyexchange=ike
	authby=secret
	auth=esp
	keylife=1h
	auto=start

>From the logs...

Mar 15 03:02:58 fswtest ipsec__plutorun: 025 "somecompany": cannot route Road Warrior template
Mar 15 03:02:58 fswtest ipsec__plutorun: 025 "somecompany": could not route
Mar 15 03:02:58 fswtest ipsec__plutorun: ...could not route conn "somecompany"
Mar 15 03:02:58 fswtest ipsec__plutorun: 029 "somecompany": cannot initiate
connection without knowing peer IP address Mar 15 03:02:58 fswtest ipsec__plutorun: ...could not start conn "somecompany"

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

Any help would be appreciated.

Thanks

Brad Hazledine <brad.hazledine@caledoncard.com>