Chinaunix

标题: openswan出现We cannot identify ourselves with either end of this connection. [打印本页]

作者: sereinliu 时间: 2009-02-02 16:43
标题: openswan出现We cannot identify ourselves with either end of this connection.
两台linux机器配置分别为：
eth0 192.168.0.235，eth1 192.168.1.235，gateway 192.168.0.11；
eth0 192.168.2.235，eth1 192.168.1.236，gateway 192.168.2.200。

linux版本为2.6.19，openswan版本为2.4.6，protostack为KLIPS。

ipsec.conf分别设置为：
version 2.0    # conforms to second version of ipsec.conf specification
# basic configuration
config setup
      nat_traversal=yes
      nhelpers=0
      protostack=klips
include no_oe.conf
conn liu
      left=192.168.1.235
      leftsubnet=192.168.0.0/24
      [email=leftid=@serein]leftid=@serein[/email]
      leftnexthop=192.168.0.11
      right=192.168.1.236
      rightsubnet=192.168.2.0/24
      [email=rightid=@sereinliu]rightid=@sereinliu[/email]
      rightnexthop=192.168.2.200
      auto=add
和
version 2.0    # conforms to second version of ipsec.conf specification
# basic configuration
config setup
      nat_traversal=yes
      nhelpers=0
      protostack=klips
include no_oe.conf

conn liu
      left=192.168.1.236
      leftsubnet=192.168.2.0/24
      [email=leftid=@sereinliu]leftid=@sereinliu[/email]
      leftnexthop=192.168.2.200
      right=192.168.1.235
      rightsubnet=192.168.0.0/24
      [email=rightid=@serein]rightid=@serein[/email]
      rightnexthop=192.168.0.11
      auto=add

ipsec setup start两台机器都是OK的。但是ipsec auto --up liu出错，出错信息如下：
pluto[1827]: "liu": We cannot identify ourselves with either end of this connection.
022 "liu": We cannot identify ourselves with either end of this connection.

找了很长时间，没有发现错在哪儿，各位老大帮忙看看，问题出在什么地方，谢谢！

作者: smartlinux 时间: 2009-02-04 17:37
[email=leftid=@serein]leftid=@serein[/email]

这行改成leftid=@serein试试

欢迎光临 Chinaunix (http://bbs.chinaunix.net/)