hello,
after configuration ipsec in ip4 I can not ping between client and server whereas I had success ping before configuration!
I also generate different key for AH and ESP as i have shown below.
what is my problem and what should i do to have ping and test the configuration?
code:
Code:
"# Configuration for (client)129.241.208.75 # Flush the SAD and SPD flush; spdflush;
# Attention: Use this keys only for testing purposes!
# Generate your own keys!
# AH SAs using 128 bit long keys add 129.241.208.75 129.241.208.230 ah 0x200 -A hmac-md5 0xb3c37ea2137625efe089a666765d2097; add 129.241.208.230 129.241.208.75 ah 0x300 -A hmac-md5 0xb885cef75052fd4bdd01220cf0930a2f;
# ESP SAs using 192 bit long keys (168 + 24 parity) add 129.241.208.75 129.241.208.230 esp 0x201 -E 3des-cbc 0xb0ed5648c7e39109a6017189c4f10ab88fd9b303114ef06c; add 129.241.208.230 129.241.208.75 esp 0x301 -E 3des-cbc 0xbde43d633d7be9cf04955f5cfc06490e95d6947d398e3fd6;
# Security policies spdadd 129.241.208.75 129.241.208.230 any -P out ipsec esp/transport//require ah/transport//require; spdadd 129.241.208.230 129.241.208.75 any -P in ipsec esp/transport//require ah/transport//require;
Moderator's Comments:
code tags for code, please.
Last edited by Corona688; 03-26-2012 at 12:34 PM..
Hello! I have some trouble trying to configure a VPN with two gateways. One of them uses IPSec with a single key, 256bits length, specified in /etc/ipsec.secrets. As FreeSwan manual page says, if i put esp=3des-md5-96, will be used a "64bit IV key (internally generated), a 192bit 3des ekey and a... (3 Replies)
Hi,
does anyone have an experience how many IPSec tunnels Solaris 10 is able manage. A rough estimation would be great.
I know it's hardly dependent on the hardware used, so if anyone says on a 490 with 2 CPUs and 4GB RAM a maximum of 1000 IPSec tunnels is possible, that would be great.
I... (1 Reply)
Hi,
I am facing problem while setting up ISAKMP between two hosts.
I can see only the Initiator messages but no responder messages in tcpdump. Does anyone know the cause of this behaviour?
FYI, here is the extracted information from tcpdump :
14:47:08.699113 IP 10.118.231.143.isakmp >... (0 Replies)
Hello,
I'm trying to setup a gateway VPN between two routers across an unsecured network between two local networks. The routers are both linux and I'm using the ipsec tools, racoon and setkey. So far hosts from either local net can successfully ping hosts on the other local net without issue.
... (0 Replies)
Hi,
I am trying to set a policy between 2 machines for all the ports except for 22 i.e. for tcp - basically I want to bypass ssh. But my policy doesn't seem to work. Here are the entries
spdadd 1.2.3.4 4.3.2.1 any -P out prio 100 ipsec esp/transport//require ah/transport//require;
spdadd... (0 Replies)
Hi, this is my first post...:p
Hello Admin :)
Can I have an ask for something with my configuration ?
I have finished some kind of the tutorial to build ipsec site to site, and the "step" has finished completely.
I have a simulation with a local design topology with two PC's (FreeBSD ... (0 Replies)
Hi Guys,
Please could you tell me if it is possible to have a single rule/filter to allow a certain port range instead of a separate rule for each port?
I'm sure it must be possible but I am unable to find the syntax.
Thanks
Chris (4 Replies)
Hi all,
I have installed Openswan and configured IPSec and works perfect, but for some unknown reasons it stop working. I see that the tunnels are up and established. The route to the destination are added. Everything by the book seems to be ok. But somehow when i start to ping the other side (... (4 Replies)
I want a lan encrypted with ipsec.
This is my /etc/inet/ike/config
p1_xform
{ auth_method preshared oakley_group 5 auth_alg sha256 encr_alg aes }
p2_pfs 2
this is my /etc/inet/secret/ike.preshared
# ike.preshared on hostA, 192.168.0.21
#...
{ localidtype IP
localid... (1 Reply)
Discussion started by: Linusolaradm1
1 Replies
LEARN ABOUT OPENSOLARIS
iconv_maz
iconv_maz(5) Standards, Environments, and Macros iconv_maz(5)NAME
iconv_maz - code set conversion tables for Mazovia
DESCRIPTION
The following code set conversions are supported:
+--------------------------------------------------------------------+
| Code Set Conversions Supported |
+--------------+--------+--------------+--------+--------------------+
| Code |Symbol |Target Code |Symbol | Target |
+--------------+--------+--------------+--------+--------------------+
|Output | | | | |
+--------------+--------+--------------+--------+--------------------+
|Mazovia |maz |ISO 8859-2 |iso2 | ISO Latin 2 |
+--------------+--------+--------------+--------+--------------------+
|Mazovia |maz |MS 1250 |win2 | Windows Latin 2 |
+--------------+--------+--------------+--------+--------------------+
|Mazovia |maz |MS 852 |dos2 | MS-DOS Latin 2 |
+--------------+--------+--------------+--------+--------------------+
|Mazovia |maz |DHN |dhn | Dom Hanlowy Nauki |
+--------------+--------+--------------+--------+--------------------+
CONVERSIONS
The conversions are performed according to the following tables. All values in the tables are given in octal.
Mazovia to ISO 8859-2
For the conversion of Mazovia to ISO 8859-2, all characters not in the following table are mapped unchanged.
+-----------------------------------------------------------------+
| | Conversions|Performed | |
| Mazovia | ISO 8859-2 | Mazovia | ISO 8859-2 |
|24-177 | 40 |230 |246 |
|200 | 307 |231 |326 |
|201 | 374 |232 |334 |
|202 | 351 |233 |40 |
|203 | 342 |234 |243 |
|204 | 344 |235 |40 |
|205 | 40 |236 |266 |
|206 | 261 |237 |40 |
|207 | 347 |240 |254 |
|210 | 40 |241 |257 |
|211 | 353 |242 |363 |
|212-213 | 40 |243 |323 |
|214 | 356 |244 |361 |
|215 | 346 |245 |321 |
|216 | 304 |246 |274 |
|217 | 241 |247 |277 |
|220 | 312 |250-340 |40 |
|221 | 352 |341 |337 |
|222 | 263 |342-365 |40 |
|223 | 364 |366 |367 |
|224 | 366 |367 |40 |
|225 | 306 |370 |260 |
|226-227 | 40 |371-376 |40 |
|256 | 201 | | |
+---------------+----------------+----------------+---------------+
Mazovia to MS 1250
For the conversion of Mazovia to MS 1250, all characters not in the following table are mapped unchanged.
+---------------+----------------+----------------+---------------+
| Mazovia | MS 1250 | Mazovia | MS 1250 |
|200 | 307 |236 |234 |
|201 | 374 |237 |40 |
|202 | 351 |240 |217 |
|203 | 342 |241 |257 |
|204 | 344 |242 |363 |
|205 | 40 |243 |323 |
|206 | 271 |244 |361 |
|207 | 347 |245 |321 |
|210 | 40 |246 |237 |
|211 | 353 |247 |277 |
|212-213 | 40 |250-251 |40 |
|214 | 356 |252 |254 |
|215 | 346 |253-255 |40 |
|216 | 304 |256 |253 |
|217 | 245 |257 |273 |
|220 | 312 |260-340 |40 |
|221 | 352 |341 |337 |
|222 | 263 |342-345 |40 |
|223 | 364 |346 |265 |
|224 | 366 |347-360 |40 |
|225 | 306 |361 |261 |
|226-227 | 40 |362-365 |0 |
|230 | 214 |366 |367 |
|231 | 326 |367 |40 |
|232 | 334 |370 |260 |
|233 | 40 |371 |40 |
|234 | 243 |372 |267 |
|235 | 40 |373-376 |40 |
|274 | 212 | | |
+---------------+----------------+----------------+---------------+
Mazovia to MS 852
For the conversion of Mazovia to MS 852, all characters not in the following table are mapped unchanged.
+-----------------------------------------------------------------+
| | Conversions|Performed | |
| Mazovia | MS 852 | Mazovia | MS 852 |
|205 | 40 |234 |235 |
|206 | 245 |235 |40 |
|210-213 | 40 |236 |230 |
|215 | 206 |237 |40 |
|217 | 244 |240 |215 |
|220 | 250 |241 |275 |
|221 | 251 |243 |340 |
|222 | 210 |244 |344 |
|225 | 217 |245 |343 |
|226-227 | 40 |246 |253 |
|230 | 227 |247 |276 |
|233 | 40 |250-375 |40 |
|227 | 327 | | |
+---------------+----------------+----------------+---------------+
Mazovia to DHN
For the conversion of Mazovia to DHN, all characters not in the following table are mapped unchanged.
+-----------------------------------------------------------------+
| | Conversions|Performed | |
| Mazovia | DHN | Mazovia | DHN |
|200-205 | 40 |234 |203 |
|206 | 211 |236 |217 |
|207-214 | 40 |240 |207 |
|215 | 212 |241 |210 |
|216 | 40 |242 |216 |
|217 | 200 |243 |205 |
|220 | 202 |244 |215 |
|221 | 214 |246 |220 |
|225 | 201 |247 |221 |
|230 | 206 | | |
+---------------+----------------+----------------+---------------+
FILES
/usr/lib/iconv/*.so conversion modules
/usr/lib/iconv/*.t conversion tables
/usr/lib/iconv/iconv_data list of conversions supported by conversion tables
SEE ALSO iconv(1), iconv(3C), iconv(5)SunOS 5.10 18 Apr 1997 iconv_maz(5)
03-26-2012
