RE: [Users] problem with start connection

Hello all,
I thought that id may be not useful in net-to-net connection. It mainly useful in road worrior configurations at which we can use leftid and rightid to distinguish between peers. My working net-to-net configurations do not use these fields.
Am I right?
BR
Haitham Genedy

-----Original Message-----
From: users-admin@lists.freeswan.org
[mailto:users-admin@lists.freeswan.org] On Behalf Of Ken Bantoft Sent: Friday, May 02, 2003 5:52 AM
To: yeta
Cc: users@lists.freeswan.org
Subject: Re: [Users] problem with start connection

-----BEGIN PGP SIGNED MESSAGE----- On Thu, 1 May 2003, yeta wrote:

> hi,all
leftrsasigkey=0sAQO3kytNtBA3iENEcOtkE1FlyTe2OqxqbUNH1dspttZvhRj4OU1V8zMo 6QboEnelRhXsX8Ch+KXx3YXFRdt64RN6sCzq1vkCs7Y/joc6XKCZ7cy7D+2RUdl/PiyGLb3a XRQAcxN3qp1R6obgNsMxfkroLepUfv17IqTp4xWKj2P7bXhJwcyqYgkojkV0z1JEibIZMFsk 3dJVmErtaeK3BJN6NbLTbww+NE0OP0/3ryaYVwvhF3pMh3i8iTdYDzjV8ZkOprI8N+G5ZxjE 2N7wh8LxhMZzEtrIsw6LqHTsR7COEavO0Vx6grpGx0u9C124rVeu8oPVnpxyuVvXJUEEWTer Qr6UKRs1M8mhM3KzvSCrWTNP
> leftnexthop=192.168.1.2
> right=192.168.1.2
> rightsubnet=255.255.255.0/24
> rightid=@HostB@csie.ntu.edu.tw
>

rightrsasigkey=0sAQNl9PRrifu5AbNQ2EFlCW7tKEf5g0ueygkwSN4mKbtJHpiyJmAgDiS f6JdVTXaj8TH/MYTWvpcJPkT2wdM1rZYFfYsqDJ1Sg6Bs+zgbe+BHCVBQV3Yv13wXOQq2ikl J8fah6yNReH2Cv/LNVZDbJmk+Lo4bikxcHa4nMBip5QueBPDxqqE3ovNmi/Dycna0rqn6coa GjCy6nmecbPYAzB2Vws/jCai23t7DovMdw288R6eWfuKR60+XvJzjfB4DhFRQlneCm7gj5Af 7AX4tsbgTFx6wX1Hfs9LC+V9l2bSLUi6T0dQlgtwTCwfbtrqOFJZfkgeLSY+4qWQwxByVLYY 4tgF+A1EnvdVFn9DkmH9y5rWv
> rightnexthop=192.168.1.1
named "net-to-net" "
> And what's wrong ?
> thanks

I don't think it likes the @sonics@csie.ntu.edu.tw notation - I believe you can only have one @ in the id= parameter.

It's ignoring the conn defination because it's invalid. Try removing the
2nd "@" on each id= parameter.

• -- Ken Bantoft The Unoffical FreeS/WAN Site: ken(at)freeswan.ca http://www.freeswan.ca PGP Key: finger ken@bantoft.org Dijkstra probably hates me.
  • Linus Torvalds, in kernel/sched.c

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQCVAwUBPrHdY1iWUusaxGxpAQGPHQQAvCSgPXDaf6bS2NumKtGNz9ICz4nyyIpF 8wV9CeV4axktLm5OG+3zRqm0JtD/gVV+yUa2hL+1/Ew9vaEnAAZ1KO8MwzyFQlml xGrPhovJBHOCbdA9NZ9+sXjOPm3tXFI6Tg9NhFUuNOmcDncj2ojiC+YQHn21zqd7 UrHehFTiWEc=
=KR6Q
-----END PGP SIGNATURE-----

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek