On Thu, 2005-01-06 at 22:40, Kanwar Ranbir Sandhu wrote: > Hello, > > I decided to try out the new IPsec "wizard" (what are they called in > Gnome, anyway? I know it's not wizard) in the system-config-network > tool. It's also the first time I've tried the new IPsec features in the > kernel. > > The setup seemed fairly easy, however I wasn't able to actually connect > to the Linksys VPN router (BEFVP41). > > Here are the settings I entered for IPsec on the client side: > > 1. Nickname: Office > 2. Type of connection: Network to Network encryption > 3. Type of encryption: Automatic via IKA (racoon) > 4. Local network address: 192.168.1.101 > Local subnet: 255.255.255.0 > Local network gateway: 192.168.1.1 > > 5. Remote IP address: xxx.xxx.xxx.xxx (the BEFVP41 WAN IP) > Remote network address: 192.168.0.0 > Remote subnet mask: 255.255.0.0 > Remote network gateway: 192.168.0.1 > The problem may be the subnet mask you used on the remote side. A 16 bit subnet will include the local subnet you defined above. You need to use a 24 bit subnet most likely. Even if the vpn was established the linksys would think 192.168.1.101 was local to it. You need to make sure you don't have overlapping address space for the VPN. Not sure if the linksys allows you to utilize NAT to convert that or not for the other end of the VPN. > -- > Kanwar Ranbir Sandhu > Linux Consultant > Systems Aligned Inc. > www.systemsaligned.com -- Scot L. Harris webid@xxxxxxxxxx Get in touch with your feelings of hostility against the dying light. -- Dylan Thomas [paraphrased periphrastically]
