<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.2523" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=458165113-14102004><FONT face=Arial size=2>Hi
there,</FONT></SPAN></DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial size=2>I have been
battleing for the last few days to get this to work.</FONT></SPAN></DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial size=2>If anyone could
shead any light on this I'd be most grateful.</FONT></SPAN></DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial size=2>The errors I am
recieving are:</FONT></SPAN></DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial size=2>Oct 14 14:47:25
fedora-1 pluto[8279]: packet from 192.168.42.29:500: ignoring Vendor ID payload
[MS NT5 ISAKMPOAKLEY 00000004]<BR>Oct 14 14:47:25 fedora-1 pluto[8279]: packet
from 192.168.42.29:500: ignoring Vendor ID payload [FRAGMENTATION]<BR>Oct 14
14:47:25 fedora-1 pluto[8279]: packet from 192.168.42.29:500: received Vendor ID
payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method
0<BR>Oct 14 14:47:25 fedora-1 pluto[8279]: packet from 192.168.42.29:500:
ignoring Vendor ID payload [26244d38eddb61b3172a36e3d0cfb819]<BR>Oct 14 14:47:25
fedora-1 pluto[8279]: "roadwarriorB"[1] 192.168.42.29 #1: responding to Main
Mode from unknown peer 192.168.42.29<BR>Oct 14 14:47:25 fedora-1 pluto[8279]:
"roadwarriorB"[1] 192.168.42.29 #1: transition from state (null) to state
STATE_MAIN_R1<BR>Oct 14 14:47:25 fedora-1 pluto[8279]: "roadwarriorB"[1]
192.168.42.29 #1: transition from state STATE_MAIN_R1 to state
STATE_MAIN_R2<BR>Oct 14 14:47:25 fedora-1 pluto[8279]: "roadwarriorB"[1]
192.168.42.29 #1: Peer ID is ID_DER_ASN1_DN: 'C=GB, L=London, O=PMSI Ltd,
OU=PMSI-IT-DB, CN=PMSI0044, <A
href="mailto:E=dbartlett@pmsi-consulting.com'">E=dbartlett@pmsi-consulting.com'</A><BR>Oct
14 14:47:25 fedora-1 pluto[8279]: "roadwarriorB"[1] 192.168.42.29 #1: I am
sending my cert<BR>Oct 14 14:47:25 fedora-1 pluto[8279]: "roadwarriorB"[1]
192.168.42.29 #1: transition from state STATE_MAIN_R2 to state
STATE_MAIN_R3<BR>Oct 14 14:47:25 fedora-1 pluto[8279]: "roadwarriorB"[1]
192.168.42.29 #1: sent MR3, ISAKMP SA established<BR>Oct 14 14:47:25 fedora-1
pluto[8279]: "roadwarriorB"[1] 192.168.42.29 #1: cannot respond to IPsec SA
request because no connection is known for 192.168.42.250[C=GB, L=London, O=PMSI
Ltd, OU=PMSI-IT-VPN, CN=vpn.pmsi-consulting.com]:17/1701...192.168.42.29[C=GB,
L=London, O=PMSI Ltd, OU=PMSI-IT-DB, CN=PMSI0044, <A
href="mailto:E=dbartlett@pmsi-consulting.com]:17/1701">E=dbartlett@pmsi-consulting.com]:17/1701</A><BR>Oct
14 14:47:25 fedora-1 pluto[8279]: "roadwarriorB"[1] 192.168.42.29 #1: sending
encrypted notification INVALID_ID_INFORMATION to 192.168.42.29:500<BR>Oct 14
14:47:27 fedora-1 pluto[8279]: "roadwarriorB"[1] 192.168.42.29 #1: Quick Mode I1
message is unacceptable because it uses a previously used Message ID 0x4f9ce486
(perhaps this is a duplicated packet)<BR>Oct 14 14:47:27 fedora-1 pluto[8279]:
"roadwarriorB"[1] 192.168.42.29 #1: sending encrypted notification
INVALID_MESSAGE_ID to 192.168.42.29:500<BR>Oct 14 14:47:27 fedora-1 pluto[8279]:
"roadwarriorB"[1] 192.168.42.29 #1: received Delete SA payload: deleting ISAKMP
State #1<BR>Oct 14 14:47:27 fedora-1 pluto[8279]: "roadwarriorB"[1]
192.168.42.29: deleting connection "roadwarriorB" instance with peer
192.168.42.29 {isakmp=#0/ipsec=#0}<BR>Oct 14 14:47:27 fedora-1 pluto[8279]:
packet from 192.168.42.29:500: received and ignored informational
message<BR></FONT></SPAN></DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial size=2>Here is my current
ipsec.conf:</FONT></SPAN></DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial size=2>version
2.0</FONT></SPAN></DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial size=2></FONT></SPAN><FONT
face=Arial size=2></FONT> </DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial size=2>config
setup<BR> interfaces="ipsec0=eth0
ipsec2=eth2"<BR>
virtual_private=%v4:192.168.42.0/24<BR>
klipsdebug=none<BR>
plutodebug=none</FONT></SPAN></DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial size=2><BR>conn
%default<BR>
keyingtries=1<BR>
compress=yes<BR>
authby=rsasig<BR>
leftrsasigkey=%cert<BR>
rightrsasigkey=%cert<BR>
keyexchange=ike<BR> leftid="C=GB,
L=London, O=PMSI Ltd, OU=PMSI-IT-VPN,
CN=vpn.pmsi-consulting.com"<BR>
leftcert=vpn.pmsi-consulting.com.pem<BR>
leftsubnetwithin=192.168.42.0/24<BR>
right=%any<BR>
auto=add<BR>
pfs=yes<BR>
auth=esp</FONT></SPAN></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial size=2>conn
roadwarrior<BR>
disablearrivalcheck=no<BR>
rightsubnet=vhost:%no,%priv,%all<BR>
left=%any<BR>
forceencaps=yes</FONT></SPAN></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial size=2>conn
roadwarriorB<BR>
disablearrivalcheck=no<BR>
rightid="C=GB, L=London, O=PMSI Ltd, OU=PMSI-IT-DB, CN=PMSI0044, <A
href="mailto:E=dbartlett@pmsi-consulting.com">E=dbartlett@pmsi-consulting.com</A>"<BR>
right=%any<BR>
left=192.168.42.250<BR>
forceencaps=yes<BR>
leftprotoport=0/0<BR>
rightprotoport=0/0</FONT></SPAN></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial size=2>I am testing the VPN
from a Windows XP box. While I am testing it I am actually sitting on the same
subnet so I have enabled the eth2=ipsec2 and am using the roadwarriorB
connection.</FONT></SPAN></DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial size=2>Kind
regards,</FONT></SPAN></DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial
size=2>Daniel.</FONT></SPAN></DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=458165113-14102004><FONT face=Arial size=2>PS. HELP - I'm
begining to pull my hair out!</DIV></FONT></SPAN></BODY></HTML>