probleme tunnel entre 2 MNF

[juliouz]

Bonjour,
Voila j'ai monté 2 MNF

MNF1 : eth0 : ipfixeMNF1
eth1 : 192.168.1.110 lan : 192.168.1.0/24

MNF2 : eth0 : ipfixeMNF2
eth1 : 192.168.0.200 lan : 192.168.0.0/24

MNF1 est a gauche
MNF2 est a droite
les key et certificats ont été copiés correctement


ces 2 mnf sont sur des sites différents que je souhaite relier au moyen d'un tunnel IPSec.
J'ai suivi la méthode de chez mandriva (pas très explicite sur quel station modifier )
Desormais lorque je redémare ou démare IPsec sur ma MNF1 g droit à ca :

MNF1 :
Oct 19
17:01:50 ipsec_setup Starting FreeS/WAN IPsec 1.97...

Oct 19
17:01:56 snort spp_portscan: portscan status from 60.184.128.26: 6 connections across 6 hosts: TCP(6), UDP(0)

Oct 19
17:02:00 CROND (root) CMD ( /usr/share/msec/promisc_check.sh)

Oct 19
17:02:04 kernel klips_info:ipsec_init: KLIPS startup, FreeS/WAN IPSec version: 1.95

Oct 19
17:02:04 ipsec_setup KLIPS debug `none'

Oct 19
17:02:04 ipsec_setup KLIPS ipsec0 on eth0 213.244.3.203/255.255.255.248 broadcast 213.244.3.207

Oct 19
17:02:05 ipsec_setup ...FreeS/WAN IPsec started

Oct 19
17:02:05 ipsec__plutorun Starting Pluto subsystem...

Oct 19
17:02:05 Pluto Starting Pluto (FreeS/WAN Version 1.97)

Oct 19
17:02:05 Pluto including X.509 patch (Version 0.9.10)

Oct 19
17:02:05 Pluto Changing to directory '/etc/freeswan/ipsec.d/cacerts'

Oct 19
17:02:05 Pluto loaded cacert file 'ca.crt' (1285 bytes)

Oct 19
17:02:05 Pluto Changing to directory '/etc/freeswan/ipsec.d/crls'

Oct 19
17:02:05 Pluto loaded crl file 'crl.crt' (678 bytes)

Oct 19
17:02:05 Pluto loaded my default X.509 cert file '/etc/freeswan/x509cert.der' (1249 bytes)

Oct 19
17:02:06 Pluto listening for IKE messages

Oct 19
17:02:06 Pluto adding interface ipsec0/eth0 IPFIXE_MNF1

Oct 19
17:02:06 Pluto loading secrets from "/etc/freeswan/ipsec.secrets"

Oct 19
17:02:06 Pluto loaded private key file '/etc/freeswan/ipsec.d/private/MNF1.XXX.com.key' (1679 bytes)

Oct 19
17:02:06 ipsec__plutorun whack error: "MNF2.xxx.com-vpn" byte overflow in dotted-decimal address "IPFixe_MNF1"

Oct 19
17:02:06 ipsec__plutorun ...could not add conn "MNF2.xxx.com-vpn"

Oct 19
17:02:07 ipsec__plutorun 021 no connection named "MNF2.xxx.com-vpn"

Oct 19
17:02:07 ipsec__plutorun ...could not route conn "MNF2.xxx.com-vpn"

Oct 19
17:02:07 ipsec__plutorun 021 no connection named "MNF2.xxx.com-vpn"

Oct 19
17:02:07 ipsec__plutorun ...could not start conn "MNF2.egee-soft.com-vpn"


Lorsque je démare IPsec sur MNF2

Oct 19 15:48:04 MNF2 ipsec_setup: ...FreeS/WAN IPsec started
Oct 19 15:48:04 MNF2 Pluto[6024]: Starting Pluto (FreeS/WAN Version 1.97)
Oct 19 15:48:04 MNF2 Pluto[6024]: including X.509 patch (Version 0.9.10)
Oct 19 15:48:04 MNF2 Pluto[6024]: Changing to directory '/etc/freeswan/ipsec.d/cacerts'
Oct 19 15:48:04 MNF2 Pluto[6024]: Warning: empty directory
Oct 19 15:48:04 MNF2 Pluto[6024]: Changing to directory '/etc/freeswan/ipsec.d/crls'
Oct 19 15:48:04 MNF2 Pluto[6024]: Warning: empty directory
Oct 19 15:48:04 MNF2 Pluto[6024]: loaded my default X.509 cert file '/etc/freeswan/x509cert.der' (1261 bytes)
Oct 19 15:48:08 MNF2 Pluto[6024]: loaded host cert file '/etc/freeswan/ipsec.d/MNF1.xxx.com.crt' (1285 bytes)
Oct 19 15:48:08 MNF2 Pluto[6024]: loaded host cert file '/etc/freeswan/ipsec.d/MNF2.xxx.com.crt' (1289 bytes)
Oct 19 15:48:08 MNF2 Pluto[6024]: added connection description "MNF1.xxx.com-vpn"
Oct 19 15:48:08 MNF2 Pluto[6024]: listening for IKE messages
Oct 19 15:48:08 MNF2 Pluto[6024]: adding interface ipsec0/eth0 IPFixe_MNF2
Oct 19 15:48:08 MNF2 Pluto[6024]: loading secrets from "/etc/freeswan/ipsec.secrets"
Oct 19 15:48:08 MNF2 Pluto[6024]: loaded private key file '/etc/freeswan/ipsec.d/private/MNF2.xxx.com.key' (1679 bytes)
Oct 19 15:48:09 MNF2 Pluto[6024]: "MNF1.xxx.com-vpn" #1: initiating Main Mode
Oct 19 15:48:09 MNF2 Pluto[6024]: "MNF1.xxx.com-vpn" #1: ERROR: asynchronous network error report on eth0 for message to IPfixe_MNF1 port 500, complainant IPfixe_MNF1: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)]
Oct 19 15:48:19 MNF2 Pluto[6024]: "MNF1.xxx.com-vpn" #1: ERROR: asynchronous network error report on eth0 for message to IPfixe_MNF1 port 500, complainant IPfixe_MNF1: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)]
oct 19 15:48:24 MNF2 ipsec_setup: Stopping FreeS/WAN IPsec...
Oct 19 15:48:25 MNF2 Pluto[6024]: shutting down
Oct 19 15:48:25 MNF2 Pluto[6024]: forgetting secrets
Oct 19 15:48:25 MNF2 Pluto[6024]: "MNF1.egee-soft.com-vpn": deleting connection
Oct 19 15:48:25 MNF2 Pluto[6024]: "MNF1.egee-soft.com-vpn" #1: deleting state (STATE_MAIN_I1)
Oct 19 15:48:25 MNF2 ipsec__plutorun: 104 "MNF1.xxx.com-vpn" #1: STATE_MAIN_I1: initiate
Oct 19 15:48:25 MNF2 ipsec__plutorun: 010 "MNF1.xxx.com-vpn" #1: STATE_MAIN_I1: retransmission; will wait 20s for response
Oct 19 15:48:25 MNF2 ipsec__plutorun: ...could not start conn "MNF1.xxx.com-vpn"
Oct 19 15:48:25 MNF2 Pluto[6024]: shutting down interface ipsec0/eth0 IPfixe_MNF2


Voila bon ca fait deux jour ke je tente des trucs a droite a gauche, rien n'y fait, j'annalyse les logs, j'comprend pa j'ai tout suivi a la lettre.

quelques questions me taraudent tout de meme, la section serveur vpn est bien a remplir sur les deux MNF??? mettant en premier le serveur local?
Il faut bien ne rien remplir ds la section client?
Dans la section configuration du serveur VPN, le champ VPN distant correspond à la passerelle du FAI?

Merci d'avance pour vos responses j'espere avoir été clair sinon n'hesitez pa pr des précisions.