Ubuntu Linux laptop roadwarrior to IPCop VPN 1.4.6

[Eric S. Johansson]

Frederic Soulier wrote:
> Hi
> 
> I've an IPCop firewall 1.4.6 setup with VPN activated with a pre- shared 
> key.
> I can connect to it without problem using IPSecuritas from a Mac OS X  
> roadwarrior or TheGreenBow VPN from a Windows XP Pro roadwarrior but  so 
> far no luck with connecting from a Linux roadwarrior running  Ubuntu 
> Hoary (5.0.4)...

as they say, two out of three isn't bad... unless you're the one.

> 
> Ubuntu laptop (using a wireless Netgear WG511 card):
>    IP: 192.168.0.121
> 
> $ sudo apt-get install openswan (to get Openswan installed)

I wonder if part of the problem might be that IPCop is still on 1.x 
openswan.  we really need to upgrade.

> conn office
>     left=%defaultroute
>     right=<public IP of the IPCop VPN>
>     rightsubnet=192.168.50.0/24
>     auto=add

I suggest taking this problem to the IPCop users mailing list.  I'd also 
like to see the full configuration you are using.

> Then I try to bring the connection up
> $ sudo ipsec auto --up office
> 104 "office" #1: STATE_MAIN_I1: initiate
> 010 "office" #1: STATE_MAIN_I1: restransmission; will wait 20s for  
> response
> 010 "office" #1: STATE_MAIN_I1: restransmission; will wait 40s for  
> response
> ....
> So I just Ctrl-C here because it does do anything good.
> 
> Trying to ping my internal netwwork gives:
> connect: Resource temporarily unavailable
> 
> I have to stop IPsec to get my network back...
> $ sudo /etc/init.d/ipsec stop
> 
> 
> Any info would be appreciated. Thanks.

you have more problems than just IPsec.  For example, when you turn on 
IPsec what happens to the routing?  use netstat -nr

---eric