我的配置如下

        A---------------eth0  router  eth1-------------B
 192.168.1.100       192.168.1.1     192.168.2.1    192.168.2.100

ipsec.conf:
config setup
        nat_traversal=yes
        plutowait=yes
        nhelpers=0

conn %default

conn test
        authby=secret
        auto=add
        keyingtries=3
        left=192.168.2.1
        pfs=no
        rekey=no
        right=192.168.2.100

#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf



ipsec.secrets:

: PSK "1234567890"


A是win xp 用mmc 開ipsec的功能 B是裝openswan的linux

目前沒辦法連上(動作是 A ping B)

用wireshark 看
在exchange key 之後
A會送一個 identification 的 payload給 B
可是 B會回送一個 hash的 payload 給A
查看/var/log/message
有這一段

Oct  8 18:37:27 haha pluto[6387]: "test" #1: Main mode peer ID is ID_IPV4_ADDR: '192.168.1.100'
Oct  8 18:37:27 haha pluto[6387]: "test" #1: no suitable connection for peer '192.168.1.100'
Oct  8 18:37:27 haha pluto[6387]: "test" #1: sending encrypted notification INVALID_ID_INFORMATION to 192.168.2.1:

(太長了@_@...)

請問是我的conf有什麼地方寫錯嗎??~


--
※ 發信站: 批踢踢實業坊(ptt.cc) 
◆ From: 220.228.151.221