openswan working with cisco easy vpn client, rogor unda gavaketo

mokled albat mixvdit risi gaketebac minda. serveri romelzec openswan unda dakendes (fedora core 4) aris firewall -is ukan romelic aseve natsac aketebs. userebma vpn clientad cisco easy vpn clienti unda gamoikenon. rogor unda davakonfigo openswan ise rom cisco easy vpn clientidan daukonektde iqneb vinmem damexmarot
* * *
es kerneli rogor unda davakompiliro kide rom ipsec supporti qondes openswan ki gadmovtere magram ipsec verify ai ras miters

Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path [OK]
Linux Openswan U2.4.4/K(no kernel code presently loaded)
Checking for IPsec support in kernel [FAILED]
Checking for RSA private key (/etc/ipsec.secrets) [FAILED]
ipsec showhostkey: file `/etc/ipsec.secrets' does not exist
Checking that pluto is running [FAILED]
whack: Pluto is not running (no "/var/run/pluto/pluto.ctl")
Two or more interfaces found, checking IP forwarding [FAILED]
whack: Pluto is not running (no "/var/run/pluto/pluto.ctl")
Checking for 'ip' command [OK]
Checking for 'iptables' command [OK]
Opportunistic Encryption Support [DISABLED]

კერნელი უნდა გადაკომპილირო

make menuconfig და იქ ნახავ IPSec-საც და IP Forwarding-საც მემგონი ეგენი უნდა იყოს Networking-ში

kerneli davakompilire da kvela sachiro patchic davakene magram mainc ar mushaobs logebshi errorebs arsad ar madzlevs.
ipsec.conf
version 2.0
nat_traversal=yes
config setup
interfaces=%defaultroute
klipsdebug=none
plutodebug=none
overridemtu=1410
nat_traversal=yes
virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16

conn %default
keyingtries=3
compress=yes
disablearrivalcheck=no
authby=secret
type=tunnel
keyexchange=ike
ikelifetime=240m
keylife=60m

conn roadwarrior-net
leftsubnet=192.168.0.0/16
also=roadwarrior

conn roadwarrior-all
leftsubnet=0.0.0.0/0
also=roadwarrior

conn roadwarrior-l2tp
leftprotoport=17/0
rightprotoport=17/1701
also=roadwarrior

conn roadwarrior-l2tp-updatedwin
leftprotoport=17/1701
rightprotoport=17/1701
also=roadwarrior

conn roadwarrior
pfs=no
left=192.168.0.45
leftnexthop=192.168.0.1
right=%any
rightsubnet=vhost:%no,%priv
auto=add

#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf


l2tpd.conf
[global]
port = 1701

[lns default]
ip range = 192.168.6.101-192.168.6.254
local ip = 192.168.6.100
require chap = yes
refuse pap = yes
require authentication = yes
name = LinuxVPN
ppp debug = yes
pppoptfile = /etc/ppp/options.l2tpd
length bit = yes


options.l2tpd

ipcp-accept-local
ipcp-accept-remote
ms-dns 62.168.168.2
noccp
auth
crtscts
idle 1800
mtu 1410
mru 1410
nodefaultroute
debug
lock
proxyarp
connect-delay 5000
silent

* * *
/var/log/messages
Apr 26 13:45:20 multimedia kernel: NET: Registered protocol family 15
Apr 26 13:45:21 multimedia ipsec_setup: KLIPS ipsec0 on eth0 192.168.0.45/255.255.255.0 broadcast 192.168.0.255 mtu 1410
Apr 26 13:45:21 multimedia ipsec_setup: ...Openswan IPsec started
Apr 26 13:45:21 multimedia ipsec_setup: Starting Openswan IPsec 2.4.4...
Apr 26 13:45:21 multimedia ipsec_setup: insmod /lib/modules/2.6.12-1.1413_FC5/kernel/net/key/af_key.ko
Apr 26 13:45:21 multimedia ipsec_setup: insmod /lib/modules/2.6.12-1.1413_FC5/kernel/net/ipv4/xfrm4_tunnel.ko

* * *
gavakete windows xp is vpn clientis brali iko ragac ms patchi undoda. es patchebi rom ar arsebobdes xp stvis bili bidzia albat mokvdeboda