VPN Tunnel

Nuno Meireles <[email protected]>
Newsgroups gmane.comp.security.firewalls.m0n0wall
Message-ID <[email protected]>
Hi.
I´m try to build a vpn ipsec tunnel between two monowall boxes.

my config is :
*
monowall 1*

wan static ip (82.154.xxx.xxx)
lan subnet 10.0.0.1

Nat-T- Enable Nat Transversal
remote subnet 192.168.3.1/24
remote gateway - xxx.dyndns.org

Phase1
negotiatin mode - aggressive
My identifier - my ipadress - 82.154.xxx.xxx
encryption algorithm - 3ds
hash algorithm - sha1
dh key group - 2
lifetime - 86400
authentication method - pre-shared key
pre-shared key - 12345678

Phase 2
protocol - ESP
Encryption algorithms - Blowfish
Hash algorithms - SHA1
PFS key group - 2
Lifetime - 86400

*monowall 2*

wan dynamic ip (xxxxx.dyndns.org)
lan subnet 192.168.3.1

**
Nat-T- Enable Nat Transversal
remote subnet 10.0.0.1/8
remote gateway - 82.154.xxx.xxx

Phase1
negotiatin mode - aggressive
My identifier - Domain Name - xxx.dyndns.org
encryption algorithm - 3ds
hash algorithm - sha1
dh key group - 2
lifetime - 86400
authentication method - pre-shared key
pre-shared key - 12345678

Phase 2
protocol - ESP
Encryption algorithms - Blowfish
Hash algorithms - SHA1
PFS key group - 2
Lifetime - 86400

But doesn´t work. When i do ping 192.168.3.1, says network unreachable

this is the logs.

Jun 30 09:34:10 racoon: INFO: 10.0.0.254[4500] used as isakmp port (fd=13)  Jun
30 09:34:10 racoon: INFO: 10.0.0.254[4500] used for NAT-T  Jun 30
09:34:38 racoon:
INFO: IPsec-SA request for 66.28.22.88 queued due to no phase1 found.  Jun
30 09:34:38 racoon: INFO: initiate new phase 1 negotiation:
82.154.249.173[500]<=>66.28.22.88[500]  Jun 30 09:34:38 racoon: INFO: begin
Aggressive mode.  Jun 30 09:35:09 racoon: ERROR: phase2 negotiation failed
due to time up waiting for phase1. ESP 66.28.22.88[0]->82.154.249.173[0]  Jun
30 09:35:09 racoon: INFO: delete phase 2 handler.  Jun 30 09:35:28 racoon:
ERROR: phase1 negotiation failed due to time up.
d56c4e91e6c68b35:0000000000000000
Can you help-me


Nuno
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.