Re: [Users] Super-freeswan and Windows 2000, using certs X.509 - 'Negotating IP Security' while pinging

-----BEGIN PGP SIGNED MESSAGE----- On Tuesday 30 September 2003 04:46, Peteris Krisjanis wrote:
> I'm using roadwarrior-net connection. Everything seems to work so far

Find out what's going wrong with the negotiation.

Check the logs on the FreeS/WAN box; useful messages are typically found in /var/log/messages and /var/log/secure (or the equivalent on your distro). Note: the "ipsec barf" command is a useful summary.

Also, check the logs on the Windows box (oakley.log). You need to enable logging on the Windows side:

http://www.windows2000faq.com/Articles/Index.cfm?ArticleID=15321

Take some time and look through for errors, if any can be found. I highly recommend that you search the list archives for hints - FreeS/WAN/Win2k interop is very common, and it's likely that your problem has been encountered before (and solved on the lists).

http://lists.freeswan.org/search.html
http://www.google.com/search?q=site%3Alists.freeswan.org

• -- Sam Sgro sam@freeswan.org

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

-----BEGIN PGP SIGNATURE-----

Version: 2.6.3ia
Charset: noconv
Comment: For the matching public key, finger the Reply-To: address.

iQCVAwUBP3lIokOSC4btEQUtAQFwUwQAiC0GFW9+jUC8JIyBSv6XAuqf+YcRDCSc X8IF8591h8m67aPWMVdmB3+ajr21sErWSHzp2DGCGb2sPjo5sTjRkwo1yswm0P76 u6Ff0WNeMopqx8Lm+jPFoVsWTdV1Bd2KlJ3HsDMd7T17YM3IQ23tntzsJw8A7K32 hBLIGRQZC5I=
=rt+7
-----END PGP SIGNATURE-----