Re: [Users] Problem with Freeswan and Road-Warrior on XP

    Hello,

        Just for the sake of it, it worked : ) I took out the "network=auto" line from the XP ipsec.conf file and everything went smoothly.

                                                                                Thanks for all the help!

                                                                                                                Marcelo

• Original Message ----- From: Marcelo Mercio Dandrea To: users@lists.freeswan.org Sent: Friday, February 13, 2004 4:52 PM Subject: Re: [Users] Problem with Freeswan and Road-Warrior on XP

      Here it comes:

  XP ipsec.conf

  conn roadwarrior

      left=%any

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

      right=192.168.157.37

      rightca="C=BR, ST=RS, L=Porto Alegre, O=Company, OU=Marketing, CN=Marcelo Mercio, E=marcelo.mercio@xxx.com.br"

      network=auto

      auto=start

      pfs=yes

      I saw an example on the net where the %any clause was on the "right" config, not left... but I suppose this wouldnt be the cause, right?

                                                                              Thanks,

                                                                                  Marcelo

• Original Message ----- From: "Sam Sgro" <sam@freeswan.org> To: <users@lists.freeswan.org>; "Marcelo Mercio Dandrea" <marcdan@terra.com.br> Sent: Friday, February 13, 2004 2:12 PM Subject: Re: [Users] Problem with Freeswan and Road-Warrior on XP

  -----BEGIN PGP SIGNED MESSAGE-----   On Friday 13 February 2004 12:31, Marcelo Mercio Dandrea wrote:
> But that seems to be the problem... the message "Negotiating..." does
> not appear if I issue a ping after running ipsec.exe... It only appears if
> I enable a native XP policy using MMC....I suppose something is wrong with
> the ipsec.exe policy....also, nothing appears on the servers´log....

  Hmm. I'd ask you to post the contents of the XP side's ipsec.conf, though I   don't expect to see much out of the ordinary. Has anyone else seen this sort   of behavior with Marcus' tool/XP? (Keep in mind that he's on the same LAN as   his peer, and his peer isn't the default gateway.)

• -- Sam Sgro sam@freeswan.org -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.3 (GNU/Linux)

Do you need more help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

  iQCVAwUBQC0Fe0OSC4btEQUtAQGYDwP7B1iU9sS/lwWvg+bNc3SvYHLfIOBy2OZJ   8QrYV18kIQ/nHHHnwoXypa+NeeWvbcrZXXJwvajuinTI7kTmSJJdplNQ55jp3guA   2PV7sX4yTaGPjjJbdu8/PcUqRCl4NqbUdv2Z4pNk6qnyfvbJ+fNTfr0zoVGajKis   cKk62RtIqYg=
  =o1S4
  -----END PGP SIGNATURE----- Received on Sat Feb 14 12:01:43 2004