[linux] OpenSwan IPSEC pripojenie na Cisco concentrator

[Juraj Variny]

Zdravim vsetkych,

neviem sa pohnut s rozbehanim $subj.V logu vidim(skratene):

pluto[23242]: "conn" #1: STATE_MAIN_I4: ISAKMP SA established
{auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha
group=modp1024}
pluto[23242]: "conn" #2: initiating Quick Mode
PSK+ENCRYPT+TUNNEL+PFS+UP {using isakmp#1}
sending 372 bytes for quick_outI1 through eth1:500 to 212.5.209.194:500:
pluto[23242]: *received 84 bytes from 212.5.209.194:500 on eth1 (port=500)
pluto[23242]: "conn" #1: ignoring informational payload, type NO_PROPOSAL_CHOSEN

IKE faza - autentifikacia - zbehne v poriadku, ale Cisco stale
odpoveda NO_PROPOSAL_CHOSEN pri pokuse vytvorit ESP tunel.  Myslim si
ze dovod je ten ze ja sa pokusam pod Linuxom vytvorit subnet-to-subnet
tunel, zatial co na strane Cisca je to nastavene nejako inac. Podla
dohody na nasej strane maju byt nastavene 3 IP adresy, na ich strane 2
IP adresy ktore maju povolene tento tunel pouzivat. Na Cisco strane
maju na tieto IPcky konfigurovany, citujem, "vyberovy vpn filter na
urovni IP (sietovej)" - vedel by mi to nejaky Cisco expert prelozit do
anglictiny, poradit co mam hladat?

192.168.x.x\
192.168.x.y-- OpenSwan(debian lenny) -adsl router(NAT) -internet -
Cisco VPN - 10.x.y.z, 10.x.y.zz
192.168.x.z/

Vsetky navody sa totiz zaoberaju iba subnet-to-subnet spojenim,
nenasiel som tam nieco taketo spomenute. Keby ste mi chceli router
prepnut

Vdaka

Juraj