<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#333399">
Hi Paul,<br>
<br>
We got to the bottom of this - it was the shared secret it didn't like!
Something's changed in the kernel (as thats the only difference) which
now doesn't like certain characters being used in the secret....which
is odd.<br>
<br>
Basically, the shared secret we were using was "r%w£a&704" - this
works fine on a 2.4 kernel, but produces a "PAYLOAD_MALFORMED" error
when run on a 2.6 kernel! Versions of Openswan and ipsec-tools are
identical. We changed the secret to an alphanumeric string and it works
fine on the 2.6 box now.<br>
<br>
Is this a bug, or is the change deliberate?<br>
<br>
Matt<br>
<br>
on 24/08/2004 18:07 Paul Wouters said the following:<br>
<blockquote
cite="midPine.LNX.4.61.0408241907090.15992@expansionpack.xtdnet.nl"
type="cite">On Tue, 24 Aug 2004, Matthew Claridge wrote:
<br>
<br>
<blockquote type="cite">do you think maybe getting the cisco config
reloaded/cycled might kick things into touch?
<br>
</blockquote>
<br>
Yes, I think the cisco still has some old isakmp SA from the previous
box loaded.
<br>
<br>
If that helps, I would appreciate an email so I can add this info to
the interop
<br>
documentation.
<br>
<br>
Paul
<br>
<br>
_____________________________________________________________________
<br>
This e-mail has been scanned for viruses by MCI's Internet Managed
Scanning Services - powered by MessageLabs. For further information
visit <a class="moz-txt-link-freetext" href="http://www.mci.com">http://www.mci.com</a>
<br>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<font size="-1"><strong>Matthew Claridge</strong><br>
Product Support Engineer<br>
RWA Limited<br>
Direct line: 02920 815 054<br>
Email: <a class="moz-txt-link-abbreviated" href="mailto:mclaridge@rwa-net.co.uk">mclaridge@rwa-net.co.uk</a><br>
Web: <a class="moz-txt-link-abbreviated" href="http://www.rwa-net.co.uk">www.rwa-net.co.uk</a></font></div>
</body>
</html>