On 8/7/05, chris schlaepfer <cssowiso at gmx dot net> wrote:
> Hi,
> Since hours I try to establish a Site to Site IPSEC-Tunnel according to
> the documentation on the m0n0wall-page.
> Unfortunately after the setting-up of the tunnel on the IPSEC-Diagnostic
> page there are no SAD shown "No IPsec security association" and
> therefore I guess it doesn't exist any tunnel. Though there exists two
> entries in SPD
The settings look fine. I'd start with a general communications issue
troubleshooting. If you add a rule on both WAN interfaces to permit
ICMP, can you ping m0n01 from m0n02 and vice versa? If that works,
posting any messages from racoon under Diagnostics -> System Logs
might help.
-Chris |