From owner-freebsd-net@FreeBSD.ORG  Tue Apr 15 15:37:15 2003
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 5B5CF37B401; Tue, 15 Apr 2003 15:37:15 -0700 (PDT)
Received: from lava.sentex.ca (pyroxene.sentex.ca [199.212.134.18])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 7F7D543FA3; Tue, 15 Apr 2003 15:37:14 -0700 (PDT)
	(envelope-from damian@sentex.net)
Received: from pegmatite.sentex.ca (pegmatite.sentex.ca [192.168.42.92])
	by lava.sentex.ca (8.12.9/8.12.8) with ESMTP id h3FMbEME080539;
	Tue, 15 Apr 2003 18:37:14 -0400 (EDT)
	(envelope-from damian@sentex.net)
Received: by pegmatite.sentex.ca (Postfix, from userid 1001)
	id 4DA28170EC; Tue, 15 Apr 2003 18:37:13 -0400 (EDT)
Date: Tue, 15 Apr 2003 18:37:13 -0400
From: Damian Gerow <damian@sentex.net>
To: Ruslan Ermilov <ru@freebsd.org>
Message-ID: <20030415223713.GB648@sentex.net>
References: <20030415215844.GY648@sentex.net>
	<20030415220310.GB57610@sunbay.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <20030415220310.GB57610@sunbay.com>
X-Operating-System: FreeBSD 5.0-CURRENT on a i386
X-GPG-Key: https://ssl3.sentex.ca/~damian/damian.asc
X-GPG-Key-Id: 0xB841F142
X-GPG-Fingerprint: C7C1 E1D1 EC06 7C86 AF7C  57E6 173D 9CF6 B841 F142
User-Agent: Mutt/1.5.3i
X-Virus-Scanned: By Sentex Communications (lava/20020517)
cc: net@freebsd.org
Subject: Re: IPSec tunnel setup problems
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 15 Apr 2003 22:37:15 -0000

Thus spake Ruslan Ermilov (ru@freebsd.org) [15/04/03 18:04]:
> > The two psk.txt's are exactly the same, the two /etc/ipsec.conf's are
> > exact mirrors, and the two racoon.conf's are mirrors (with configuration
> > names changed to match directions).  It /feels/ like the remote (10.0.2.1)
> > isn't finding the 'remote 10.0.1.1' configuration section that exists in
> > there.  I yanked the 'remote anonymous' and 'sainfo anonymous'
> > configurations to help narrow this down.
> > 
> > Does anyone have any pointers?  Please reply personally, as I'm not
> > subscribed.
> > 
> Hmm, on my machines with IPSec tunnels the /etc/ipsec.conf's are
> NOT the exact mirrors; they are mirrors except for the in/out
> keywords.

Yes, sorry, mine are the same way.  Two tunnels, two subnets.  Each has the
appropriate 'out' rule and the appropriate 'in' rule.

  - Damian