@jimp:
You got that last racoon error (address already in use) most likely because racoon was already running and needed to be killed first.
However this may be the real issue:
2011-01-05 11:27:21: DEBUG: getsainfo params: loc='10.1.1.5/30' rmt='172.26.0.0/24' peer='y.y.y.y' client='y.y.y.y' id=0
2011-01-05 11:27:21: DEBUG: evaluating sainfo: loc='192.168.168.0/24', rmt='10.1.1.6/30', peer='ANY', id=0
2011-01-05 11:27:21: DEBUG: check and compare ids : valu mismatch (IPv4_subnet)
2011-01-05 11:27:21: DEBUG: cmpid target: '10.1.1.5/30'
2011-01-05 11:27:21: DEBUG: cmpid source: '192.168.168.0/24'
The phase 2 subnets do not match between the peers
Normally the phase 2 subnets are mirrors of each other, such as:
Site A:
sainfo address 192.168.254.0/24 any address 192.168.10.0/24 any {
encryption_algorithm 3des;
authentication_algorithm hmac_sha1;
compression_algorithm deflate;
lifetime time 3600 secs;
}
Site B:
sainfo address 192.168.10.0/24 any address 192.168.254.0/24 any {
encryption_algorithm 3des;
authentication_algorithm hmac_sha1;
compression_algorithm deflate;
lifetime time 3600 secs;
}
IPsec tunnels have no address themselves.
Wow! This fixed it for me. Outstanding my friend. I was working under the understanding that ipsec tunnels had a 'gateway ip'. Everything is working now :)
