<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.E-postmall17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;}
@page Section1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=SV link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal>Hi!<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal><span lang=EN-US>I’m having big problems with Openswan
and vpn access against two different offices.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>One new office has a Watchguard firewall (I’m
using PSK for this connection) and it works fine, no problems to bring up<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>The Vpn tunnel. The other office has a Linux
firewall with Stronswan Ipsec (using certificates).<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Our current firewall at our office are
running Freeswan 1.99 and works fine against the Strongswan ipsec firewall.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>The thing is that I wan’t to change firewall
to the new one with Openswan and get I to work both against office 1 and office
2.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>When I got the watchguard tunnel to work, I
added the configuration from the old firewall (1.99) to new Openswans firewalls
ipsec.conf.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>I also copied the certificates and edited
the ipsec.secrets to be correct….. But I don’t get it to work!!!<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Anyone has a clue on what I’m doing
wrong!!!<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Here is a output from Ipsec barf:<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:36 tidaxIpcop ipsec_setup:
...Openswan IPsec started<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:36 tidaxIpcop pluto[2818]:
ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:36 tidaxIpcop pluto[2818]:
ike_alg_register_enc(): Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:36 tidaxIpcop pluto[2818]:
ike_alg_register_enc(): Activating OAKLEY_CAST_CBC: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:36 tidaxIpcop pluto[2818]:
ike_alg_register_enc(): Activating OAKLEY_SERPENT_CBC: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:36 tidaxIpcop pluto[2818]:
ike_alg_register_hash(): Activating OAKLEY_SHA2_256: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:36 tidaxIpcop pluto[2818]:
ike_alg_register_hash(): Activating OAKLEY_SHA2_512: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:36 tidaxIpcop pluto[2818]:
ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:36 tidaxIpcop pluto[2818]:
ike_alg_register_enc(): Activating OAKLEY_SSH_PRIVATE_65289: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:36 tidaxIpcop pluto[2818]:
Changing to directory '/etc/ipsec.d/cacerts'<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:36 tidaxIpcop
pluto[2818]: loaded cacert file 'caCert.pem' (1460 bytes)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:36 tidaxIpcop pluto[2818]:
Changing to directory '/etc/ipsec.d/crls'<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:36 tidaxIpcop
pluto[2818]: loaded crl file 'cacrl.pem' (682 bytes)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:36 tidaxIpcop pluto[2818]: crl
issuer cacert not found<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:36 tidaxIpcop pluto[2818]:
OpenPGP certificate file '/etc/pgpcert.pgp' not found<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:37 tidaxIpcop pluto[2818]: |
from whack: got --esp=3des<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:37 tidaxIpcop pluto[2818]: |
from whack: got --ike=3des<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:37 tidaxIpcop
pluto[2818]: loaded host cert file '/etc/ipsec.d/fw1.tidax.se.pem'
(1346 bytes)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:37 tidaxIpcop
pluto[2818]: loaded host cert file '/etc/ipsec.d/fw3.tidax.se.pem'
(1346 bytes)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:37 tidaxIpcop pluto[2818]:
added connection description "fw-fw3"<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:37 tidaxIpcop pluto[2818]:
listening for IKE messages<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:37 tidaxIpcop pluto[2818]:
adding interface ipsec0/eth1 195.178.169.130<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:37 tidaxIpcop pluto[2818]:
adding interface ipsec0/eth1 195.178.169.130:4500<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:37 tidaxIpcop pluto[2818]:
loading secrets from "/etc/ipsec.secrets"<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:37 tidaxIpcop
pluto[2818]: loaded private key file
'/etc/ipsec.d/private/fw1Key.pem' (963 bytes)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:37 tidaxIpcop pluto[2818]:
"fw-fw3" #1: initiating Main Mode<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:37 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:37 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:47 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:17:47 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:18:07 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:18:07 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:18:47 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:18:47 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:19:19 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: Quick Mode message is for a non-existent
(expired?) ISAKMP SA<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:19:27 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:19:27 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:19:29 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: Quick Mode message is for a non-existent
(expired?) ISAKMP SA<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:19:49 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: Quick Mode message is for a non-existent
(expired?) ISAKMP SA<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:20:07 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:20:07 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:20:29 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: Quick Mode message is for a non-existent
(expired?) ISAKMP SA<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:20:39 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: Quick Mode message is for a non-existent
(expired?) ISAKMP SA<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:20:47 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:20:47 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:20:59 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: Quick Mode message is for a non-existent
(expired?) ISAKMP SA<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:21:27 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:21:27 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:21:32 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring Vendor ID payload
[b8f92b2fa2d3fe5fe158344bda1cc6ae]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:21:32 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received Vendor ID payload [Dead Peer
Detection]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:21:32 tidaxIpcop pluto[2818]:
"fw-fw3" #2: responding to Main Mode<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:21:32 tidaxIpcop pluto[2818]:
"fw-fw3" #2: policy does not allow OAKLEY_RSA_SIG
authentication. Attribute OAKLEY_AUTHENTICATION_METHOD<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:21:32 tidaxIpcop pluto[2818]:
"fw-fw3" #2: no acceptable Oakley Transform<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:21:32 tidaxIpcop pluto[2818]:
"fw-fw3" #2: sending notification NO_PROPOSAL_CHOSEN to 212.181.91.211:500<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:21:42 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring Vendor ID payload
[b8f92b2fa2d3fe5fe158344bda1cc6ae]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:21:42 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received Vendor ID payload [Dead Peer
Detection]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:21:42 tidaxIpcop pluto[2818]:
"fw-fw3" #3: responding to Main Mode<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:21:42 tidaxIpcop pluto[2818]:
"fw-fw3" #3: policy does not allow OAKLEY_RSA_SIG
authentication. Attribute OAKLEY_AUTHENTICATION_METHOD<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:21:42 tidaxIpcop pluto[2818]:
"fw-fw3" #3: no acceptable Oakley Transform<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:21:42 tidaxIpcop pluto[2818]:
"fw-fw3" #3: sending notification NO_PROPOSAL_CHOSEN to
212.181.91.211:500<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:02 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring Vendor ID payload
[b8f92b2fa2d3fe5fe158344bda1cc6ae]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:02 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received Vendor ID payload [Dead Peer
Detection]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:02 tidaxIpcop pluto[2818]:
"fw-fw3" #4: responding to Main Mode<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:02 tidaxIpcop pluto[2818]:
"fw-fw3" #4: policy does not allow OAKLEY_RSA_SIG
authentication. Attribute OAKLEY_AUTHENTICATION_METHOD<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:02 tidaxIpcop pluto[2818]:
"fw-fw3" #4: no acceptable Oakley Transform<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:02 tidaxIpcop pluto[2818]:
"fw-fw3" #4: sending notification NO_PROPOSAL_CHOSEN to
212.181.91.211:500<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:07 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:07 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:42 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring Vendor ID payload
[b8f92b2fa2d3fe5fe158344bda1cc6ae]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:42 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received Vendor ID payload [Dead Peer
Detection]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:42 tidaxIpcop pluto[2818]:
"fw-fw3" #5: responding to Main Mode<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:42 tidaxIpcop pluto[2818]:
"fw-fw3" #5: policy does not allow OAKLEY_RSA_SIG
authentication. Attribute OAKLEY_AUTHENTICATION_METHOD<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:42 tidaxIpcop pluto[2818]:
"fw-fw3" #5: no acceptable Oakley Transform<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:42 tidaxIpcop pluto[2818]:
"fw-fw3" #5: sending notification NO_PROPOSAL_CHOSEN to
212.181.91.211:500<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:47 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:22:47 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:22 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring Vendor ID payload
[b8f92b2fa2d3fe5fe158344bda1cc6ae]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:22 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received Vendor ID payload [Dead Peer Detection]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:22 tidaxIpcop pluto[2818]:
"fw-fw3" #6: responding to Main Mode<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:22 tidaxIpcop pluto[2818]:
"fw-fw3" #6: policy does not allow OAKLEY_RSA_SIG
authentication. Attribute OAKLEY_AUTHENTICATION_METHOD<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:22 tidaxIpcop pluto[2818]:
"fw-fw3" #6: no acceptable Oakley Transform<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:22 tidaxIpcop pluto[2818]:
"fw-fw3" #6: sending notification NO_PROPOSAL_CHOSEN to
212.181.91.211:500<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:27 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:27 tidaxIpcop pluto[2818]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:45 tidaxIpcop ipsec_setup:
Stopping Openswan IPsec...<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:45 tidaxIpcop pluto[2818]:
shutting down<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:45 tidaxIpcop pluto[2818]:
forgetting secrets<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:45 tidaxIpcop pluto[2818]:
"fw-fw3": deleting connection<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:45 tidaxIpcop pluto[2818]:
"fw-fw3" #1: deleting state (STATE_MAIN_I1)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:45 tidaxIpcop ipsec__plutorun:
104 "fw-fw3" #1: STATE_MAIN_I1: initiate<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:45 tidaxIpcop ipsec__plutorun:
010 "fw-fw3" #1: STATE_MAIN_I1: retransmission; will wait 20s for
response<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:45 tidaxIpcop ipsec__plutorun:
010 "fw-fw3" #1: STATE_MAIN_I1: retransmission; will wait 40s for
response<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:45 tidaxIpcop ipsec__plutorun:
...could not start conn "fw-fw3"<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:45 tidaxIpcop pluto[2818]:
shutting down interface ipsec0/eth1 195.178.169.130<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:45 tidaxIpcop pluto[2818]:
shutting down interface ipsec0/eth1 195.178.169.130<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop kernel: IPSEC
EVENT: KLIPS device ipsec0 shut down.<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop ipsec_setup:
ipsec: Device or resource busy<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop ipsec_setup:
...Openswan IPsec stopped<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop ipsec_setup:
Starting Openswan IPsec 1.0.10...<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop ipsec_setup:
KLIPS debug `none'<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop ipsec_setup:
KLIPS ipsec0 on eth1 195.178.169.130/255.255.255.240 broadcast 195.178.169.143 <o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop ipsec__plutorun:
Starting Pluto subsystem...<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop ipsec_setup:
...Openswan IPsec started<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]:
Starting Pluto (Openswan Version 1.0.10)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop
pluto[3223]: including X.509 patch with traffic selectors (Version
0.9.42)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop
pluto[3223]: including NAT-Traversal patch (Version 0.6)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]: ike_alg_register_enc():
Activating OAKLEY_AES_CBC: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]:
ike_alg_register_enc(): Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]:
ike_alg_register_enc(): Activating OAKLEY_CAST_CBC: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]:
ike_alg_register_enc(): Activating OAKLEY_SERPENT_CBC: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]:
ike_alg_register_hash(): Activating OAKLEY_SHA2_256: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]:
ike_alg_register_hash(): Activating OAKLEY_SHA2_512: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]:
ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]:
ike_alg_register_enc(): Activating OAKLEY_SSH_PRIVATE_65289: Ok (ret=0)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]:
Changing to directory '/etc/ipsec.d/cacerts'<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop
pluto[3223]: loaded cacert file 'caCert.pem' (1460 bytes)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]:
Changing to directory '/etc/ipsec.d/crls'<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop
pluto[3223]: loaded crl file 'cacrl.pem' (682 bytes)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]: crl
issuer cacert not found<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]:
OpenPGP certificate file '/etc/pgpcert.pgp' not found<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]: |
from whack: got --esp=3des<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]: |
from whack: got --ike=3des<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop
pluto[3223]: loaded host cert file '/etc/ipsec.d/fw1.tidax.se.pem' (1346
bytes)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop
pluto[3223]: loaded host cert file '/etc/ipsec.d/fw3.tidax.se.pem'
(1346 bytes)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]:
added connection description "fw-fw3"<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]: |
from whack: got --esp=3des-sha1!<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]: |
from whack: got
--ike=3des-sha-modp8192,3des-sha-modp6144,3des-sha-modp4096,3des-sha-modp3072,3des-sha-modp2048,3des-sha-modp1536,3des-sha-modp1024,3des-sha-modp768!<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:46 tidaxIpcop pluto[3223]:
added connection description "LidingoFW"<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:47 tidaxIpcop pluto[3223]:
listening for IKE messages<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:47 tidaxIpcop pluto[3223]:
adding interface ipsec0/eth1 195.178.150.120<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:47 tidaxIpcop pluto[3223]:
adding interface ipsec0/eth1 195.178.150.120:4500<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:47 tidaxIpcop pluto[3223]:
loading secrets from "/etc/ipsec.secrets"<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:47 tidaxIpcop
pluto[3223]: loaded private key file '/etc/ipsec.d/private/fw1Key.pem'
(963 bytes)<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:47 tidaxIpcop ipsec__plutorun:
022 "LidingoFW": we have no ipsecN interface for either end of this
connection<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:47 tidaxIpcop ipsec__plutorun:
...could not route conn "LidingoFW"<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:47 tidaxIpcop pluto[3223]:
"fw-fw3" #1: initiating Main Mode<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:47 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:47 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:57 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:23:57 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:01 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: ignoring Vendor ID payload
[b8f92b2fa2d3fe5fe158344bda1cc6ae]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:01 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: received Vendor ID payload [Dead Peer
Detection]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:01 tidaxIpcop pluto[3223]:
"fw-fw3" #2: responding to Main Mode<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:01 tidaxIpcop pluto[3223]:
"fw-fw3" #2: policy does not allow OAKLEY_RSA_SIG
authentication. Attribute OAKLEY_AUTHENTICATION_METHOD<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:01 tidaxIpcop pluto[3223]:
"fw-fw3" #2: no acceptable Oakley Transform<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:01 tidaxIpcop pluto[3223]:
"fw-fw3" #2: sending notification NO_PROPOSAL_CHOSEN to
212.181.91.211:500<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:17 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:17 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:42 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: ignoring Vendor ID payload
[b8f92b2fa2d3fe5fe158344bda1cc6ae]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:42 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: received Vendor ID payload [Dead Peer
Detection]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:42 tidaxIpcop pluto[3223]:
"fw-fw3" #3: responding to Main Mode<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:42 tidaxIpcop pluto[3223]:
"fw-fw3" #3: policy does not allow OAKLEY_RSA_SIG
authentication. Attribute OAKLEY_AUTHENTICATION_METHOD<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:42 tidaxIpcop pluto[3223]:
"fw-fw3" #3: no acceptable Oakley Transform<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:42 tidaxIpcop pluto[3223]:
"fw-fw3" #3: sending notification NO_PROPOSAL_CHOSEN to
212.181.91.211:500<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:57 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:24:57 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:25:22 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: ignoring Vendor ID payload
[b8f92b2fa2d3fe5fe158344bda1cc6ae]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:25:22 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: received Vendor ID payload [Dead Peer
Detection]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:25:22 tidaxIpcop pluto[3223]:
"fw-fw3" #4: responding to Main Mode<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:25:22 tidaxIpcop pluto[3223]:
"fw-fw3" #4: policy does not allow OAKLEY_RSA_SIG
authentication. Attribute OAKLEY_AUTHENTICATION_METHOD<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:25:22 tidaxIpcop pluto[3223]:
"fw-fw3" #4: no acceptable Oakley Transform<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:25:22 tidaxIpcop pluto[3223]:
"fw-fw3" #4: sending notification NO_PROPOSAL_CHOSEN to
212.181.91.211:500<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:25:37 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:25:37 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:02 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: ignoring Vendor ID payload
[b8f92b2fa2d3fe5fe158344bda1cc6ae]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:02 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: received Vendor ID payload [Dead Peer Detection]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:02 tidaxIpcop pluto[3223]:
"fw-fw3" #5: responding to Main Mode<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:02 tidaxIpcop pluto[3223]:
"fw-fw3" #5: policy does not allow OAKLEY_RSA_SIG
authentication. Attribute OAKLEY_AUTHENTICATION_METHOD<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:02 tidaxIpcop pluto[3223]:
"fw-fw3" #5: no acceptable Oakley Transform<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:02 tidaxIpcop pluto[3223]:
"fw-fw3" #5: sending notification NO_PROPOSAL_CHOSEN to
212.181.91.211:500<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:02 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: Informational Exchange is for an unknown
(expired?) SA<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:17 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:17 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:42 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: ignoring Vendor ID payload
[b8f92b2fa2d3fe5fe158344bda1cc6ae]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:42 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: received Vendor ID payload [Dead Peer
Detection]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:42 tidaxIpcop pluto[3223]:
"fw-fw3" #6: responding to Main Mode<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:42 tidaxIpcop pluto[3223]:
"fw-fw3" #6: policy does not allow OAKLEY_RSA_SIG
authentication. Attribute OAKLEY_AUTHENTICATION_METHOD<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:42 tidaxIpcop pluto[3223]:
"fw-fw3" #6: no acceptable Oakley Transform<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:42 tidaxIpcop pluto[3223]:
"fw-fw3" #6: sending notification NO_PROPOSAL_CHOSEN to
212.181.91.211:500<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:57 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:26:57 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:27:22 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: ignoring Vendor ID payload
[b8f92b2fa2d3fe5fe158344bda1cc6ae]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:27:22 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: received Vendor ID payload [Dead Peer
Detection]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:27:22 tidaxIpcop pluto[3223]:
"fw-fw3" #7: responding to Main Mode<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:27:22 tidaxIpcop pluto[3223]:
"fw-fw3" #7: policy does not allow OAKLEY_RSA_SIG
authentication. Attribute OAKLEY_AUTHENTICATION_METHOD<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:27:22 tidaxIpcop pluto[3223]:
"fw-fw3" #7: no acceptable Oakley Transform<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:27:22 tidaxIpcop pluto[3223]:
"fw-fw3" #7: sending notification NO_PROPOSAL_CHOSEN to
212.181.91.211:500<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:27:37 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: ignoring informational payload, type
NO_PROPOSAL_CHOSEN<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:27:37 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: received and ignored informational message<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:28:02 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: ignoring Vendor ID payload [b8f92b2fa2d3fe5fe158344bda1cc6ae]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:28:02 tidaxIpcop pluto[3223]:
packet from 212.181.91.211:500: received Vendor ID payload [Dead Peer
Detection]<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:28:02 tidaxIpcop pluto[3223]:
"fw-fw3" #8: responding to Main Mode<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:28:02 tidaxIpcop pluto[3223]:
"fw-fw3" #8: policy does not allow OAKLEY_RSA_SIG
authentication. Attribute OAKLEY_AUTHENTICATION_METHOD<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:28:02 tidaxIpcop pluto[3223]:
"fw-fw3" #8: no acceptable Oakley Transform<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Apr 18 07:28:02 tidaxIpcop pluto[3223]:
"fw-fw3" #8: sending notification NO_PROPOSAL_CHOSEN to
212.181.91.211:500<o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Regards <o:p></o:p></span></p>
<p class=MsoNormal><span lang=EN-US><o:p> </o:p></span></p>
<p class=MsoNormal><span lang=EN-US>Kbergros<o:p></o:p></span></p>
</div>
</body>
</html>