<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Hi,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I am running IPCOP 1.4.2 and I am told that it uses Openswan
ver 1.0.7. I am setting up a NET-to-NET vpn solution. I am pretty
sure I have configured my IPCOP boxes’ correctly, but I am getting these
errors in the /var/log/messages logs:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>….<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:37:54 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: cannot respond to IPsec
SA request because no connection is known for
192.168.111.0/24===199.227.240.202:4500...207.224.36.142:4500[207.224.36.137]===192.168.2.0/24<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:37:54 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: sending encrypted
notification INVALID_ID_INFORMATION to 207.224.36.142:4500<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:37:56 grumpy pluto[745]:
ERROR: asynchronous network error report on eth1 for message to 207.224.36.142
port 1024, complainant 207.224.36.142: No route to host [errno 113, origin ICMP
type 3 code 1 (not authenticated)]<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:38:04 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: Quick Mode I1 message is
unacceptable because it uses a previously used Message ID 0xa4732030 (perhaps
this is a duplicated packet)<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:38:04 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: sending encrypted
notification INVALID_MESSAGE_ID to 207.224.36.142:4500<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>……<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:38:36 grumpy pluto[745]:
ERROR: asynchronous network error report on eth1 for message to 207.224.36.142
port 1024, complainant 207.224.36.142: No route to host [errno 113, origin ICMP
type 3 code 1 (not authenticated)]<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:39:03 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: cannot respond to IPsec
SA request because no connection is known for
192.168.111.0/24===199.227.240.202:4500...207.224.36.142:4500[207.224.36.137]===192.168.2.0/24<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:39:03 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: sending encrypted
notification INVALID_ID_INFORMATION to 207.224.36.142:4500<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:39:13 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: Quick Mode I1 message is
unacceptable because it uses a previously used Message ID 0x84c04325 (perhaps
this is a duplicated packet)<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:39:13 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: sending encrypted
notification INVALID_MESSAGE_ID to 207.224.36.142:4500<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:39:16 grumpy pluto[745]:
ERROR: asynchronous network error report on eth1 for message to 207.224.36.142
port 1024, complainant 207.224.36.142: No route to host [errno 113, origin ICMP
type 3 code 1 (not authenticated)]<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:39:33 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: Quick Mode I1 message is
unacceptable because it uses a previously used Message ID 0x84c04325 (perhaps
this is a duplicated packet)<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:39:33 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: sending encrypted notification
INVALID_MESSAGE_ID to 207.224.36.142:4500<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>…….<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:40:13 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: cannot respond to IPsec
SA request because no connection is known for
192.168.111.0/24===199.227.240.202:4500...207.224.36.142:4500[207.224.36.137]===192.168.2.0/24<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:40:13 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: sending encrypted
notification INVALID_ID_INFORMATION to 207.224.36.142:4500<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:40:24 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: Quick Mode I1 message is
unacceptable because it uses a previously used Message ID 0x9d0e1ffb (perhaps
this is a duplicated packet)<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:40:24 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: sending encrypted
notification INVALID_MESSAGE_ID to 207.224.36.142:4500<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:40:36 grumpy pluto[745]:
ERROR: asynchronous network error report on eth1 for message to 207.224.36.142
port 1024, complainant 207.224.36.142: No route to host [errno 113, origin ICMP
type 3 code 1 (not authenticated)]<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:40:44 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: Quick Mode I1 message is
unacceptable because it uses a previously used Message ID 0x9d0e1ffb (perhaps
this is a duplicated packet)<o:p></o:p></span></font></p>
<p class=MsoNormal style='text-autospace:none'><font size=2 face=Arial><span
style='font-size:10.0pt;font-family:Arial'>Jan 25 11:40:44 grumpy pluto[745]:
"RoadWarriors"[2] 207.224.36.142:4500 #590: sending encrypted
notification INVALID_MESSAGE_ID to 207.224.36.142:4500<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I once had a host-to-ipcop box vpn working and now it has stopped.
I am really a novice at openswan vpn solutions and I would appreciate any help.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Thanks,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>Trevor </span><o:p></o:p></font></p>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</body>
</html>