[Openswan Users] openswan and sonicwall
Gary W. Smith
gary at primeexalia.com
Wed May 2 11:53:42 EDT 2007
Has anyone gotten any of the 2.4.x series to work with sonicwall? I've
seen some documentation on the site but have failed in all attempts. We
tried two different configs; with aggrmode on and off. Each had their
own errors.
version 2
conn sonicwall
type=tunnel
left=%defaultroute
leftsubnet=10.40.214.0/24
leftid=@sonicwall
leftxauthclient=yes
right=validIP
rightsubnet=192.168.0.0/16
rightxauthserver=yes
rightid=@remoteserver
keyingtries=1
pfs=yes
aggrmode=no
auto=start
auth=esp
keyexchange=ike
esp=3des-sha1
ike=3des-sha1
authby=secret
xauth=yes
@sonicwall @remoteserver : PSK "somethingstrongerthanthis!
### With aggrmode=now
May 2 08:46:22 OPENSWANTEST pluto[7272]: "sonicwall" #1: initiating
Main Mode
May 2 08:46:22 OPENSWANTEST pluto[7272]: packet from ValidIP:500:
ignoring informational payload, type NO_PROPOSAL_CHOSEN
May 2 08:46:22 OPENSWANTEST pluto[7272]: packet from ValidIP:500:
received and ignored informational message
May 2 08:46:32 OPENSWANTEST pluto[7272]: packet from ValidIP:500:
ignoring informational payload, type NO_PROPOSAL_CHOSEN
May 2 08:46:32 OPENSWANTEST pluto[7272]: packet from ValidIP:500:
received and ignored informational message
### With aggrmode=yes
May 2 08:51:40 OPENSWANTEST pluto[9348]: "sonicwall" #1: multiple
transforms were set in aggressive mode. Only first one used.
May 2 08:51:40 OPENSWANTEST pluto[9348]: "sonicwall" #1: transform
(5,2,2,0) ignored.
May 2 08:51:40 OPENSWANTEST pluto[9348]: "sonicwall" #1: initiating
Aggressive Mode #1, connection "sonicwall"
May 2 08:51:40 OPENSWANTEST pluto[9348]: "sonicwall" #1: multiple
transforms were set in aggressive mode. Only first one used.
May 2 08:51:40 OPENSWANTEST pluto[9348]: "sonicwall" #1: transform
(5,2,2,0) ignored
May 2 08:51:41 OPENSWANTEST pluto[9348]: packet from ValidIP:500:
ignoring informational payload, type INVALID_ID_INFORMATION
May 2 08:51:41 OPENSWANTEST pluto[9348]: packet from ValidIP:500:
received and ignored informational message
May 2 08:51:50 OPENSWANTEST pluto[9348]: packet from ValidIP:500:
ignoring informational payload, type INVALID_ID_INFORMATION
May 2 08:51:50 OPENSWANTEST pluto[9348]: packet from ValidIP:500:
received and ignored informational message
Any help would be greatly appreciated.
More information about the Users
mailing list