<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7651.59">
<TITLE>Mac OS X can't connect to Openswan server (Linux Kernel 2.6)</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>I'm having problem connecting to my openswan server (ver 2.4.5) using my<BR>
MAC. I tried from Tiger and Leopard OS X but to no avail. I can connect to<BR>
it using PC running XP without problem. I tried looking for a fix over the<BR>
internet but I can't find a solution to it. Here's the messages in the vpn<BR>
server on both MAC and PC. I hope you can help me figure out what seems to<BR>
be causing the problem based on this logs. Thanks.<BR>
<BR>
MAC OS X<BR>
--------<BR>
Apr 28 14:04:53 vpn pluto[2304]: packet from x.x.x.x:500: received Vendor ID<BR>
payload [RFC 3947] method set to=110<BR>
Apr 28 14:04:53 vpn pluto[2304]: packet from x.x.x.x:500: received Vendor ID<BR>
payload [draft-ietf-ipsec-nat-t-ike] meth=109, but already using method 110<BR>
Apr 28 14:04:53 vpn pluto[2304]: packet from x.x.x.x:500: ignoring unknown<BR>
Vendor ID payload [8f8d83826d246b6fc7a8a6a428c11de8]<BR>
Apr 28 14:04:53 vpn pluto[2304]: packet from x.x.x.x:500: ignoring unknown<BR>
Vendor ID payload [439b59f8ba676c4c7737ae22eab8f582]<BR>
Apr 28 14:04:53 vpn pluto[2304]: packet from x.x.x.x:500: ignoring unknown<BR>
Vendor ID payload [4d1e0e136deafa34c4f3ea9f02ec7285]<BR>
Apr 28 14:04:53 vpn pluto[2304]: packet from x.x.x.x:500: ignoring unknown<BR>
Vendor ID payload [80d0bb3def54565ee84645d4c85ce3ee]<BR>
Apr 28 14:04:53 vpn pluto[2304]: packet from x.x.x.x:500: ignoring unknown<BR>
Vendor ID payload [9909b64eed937c6573de52ace952fa6b]<BR>
Apr 28 14:04:53 vpn pluto[2304]: packet from x.x.x.x:500: received Vendor ID<BR>
payload [draft-ietf-ipsec-nat-t-ike-03] meth=108, but already using method<BR>
110<BR>
Apr 28 14:04:53 vpn pluto[2304]: packet from x.x.x.x:500: received Vendor ID<BR>
payload [draft-ietf-ipsec-nat-t-ike-02] meth=107, but already using method<BR>
110<BR>
Apr 28 14:04:53 vpn pluto[2304]: packet from x.x.x.x:500: received Vendor ID<BR>
payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but already using method<BR>
110<BR>
Apr 28 14:04:53 vpn pluto[2304]: packet from x.x.x.x:500: received Vendor ID<BR>
payload [Dead Peer Detection]<BR>
Apr 28 14:04:53 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49:<BR>
responding to Main Mode from unknown peer x.x.x.x<BR>
Apr 28 14:04:53 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49:<BR>
transition from state STATE_MAIN_R0 to state STATE_MAIN_R1<BR>
Apr 28 14:04:53 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49:<BR>
STATE_MAIN_R1: sent MR1, expecting MI2<BR>
Apr 28 14:04:53 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49:<BR>
NAT-Traversal: Result using 3: no NAT detected<BR>
Apr 28 14:04:53 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49:<BR>
transition from state STATE_MAIN_R1 to state STATE_MAIN_R2<BR>
Apr 28 14:04:53 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49:<BR>
STATE_MAIN_R2: sent MR2, expecting MI3<BR>
Apr 28 14:04:53 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49: Main<BR>
mode peer ID is ID_IPV4_ADDR: 'x.x.x.x'<BR>
Apr 28 14:04:53 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49: I did<BR>
not send a certificate because I do not have one.<BR>
Apr 28 14:04:53 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49:<BR>
transition from state STATE_MAIN_R2 to state STATE_MAIN_R3<BR>
Apr 28 14:04:53 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49:<BR>
STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY<BR>
cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1024}<BR>
Apr 28 14:04:53 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49:<BR>
ignoring informational payload, type IPSEC_INITIAL_CONTACT<BR>
Apr 28 14:04:53 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49:<BR>
received and ignored informational message<BR>
Apr 28 14:04:54 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49: cannot<BR>
respond to IPsec SA request because no connection is known for<BR>
y.y.y.y:17/1701...x.x.x.x:17/50229<BR>
Apr 28 14:04:54 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49: sending<BR>
encrypted notification INVALID_ID_INFORMATION to x.x.x.x:500<BR>
Apr 28 14:05:04 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49: Quick<BR>
Mode I1 message is unacceptable because it uses a previously used Message ID<BR>
0xd5b3489a (perhaps this is a duplicated packet)<BR>
Apr 28 14:05:04 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49: sending<BR>
encrypted notification INVALID_MESSAGE_ID to x.x.x.x:500<BR>
Apr 28 14:05:15 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49: Quick<BR>
Mode I1 message is unacceptable because it uses a previously used Message ID<BR>
0xd5b3489a (perhaps this is a duplicated packet)<BR>
Apr 28 14:05:15 vpn pluto[2304]: "roadwarrior-l2tp"[17] x.x.x.x #49: sending<BR>
encrypted notification INVALID_MESSAGE_ID to x.x.x.x:500<BR>
<BR>
<BR>
PC XP<BR>
-----<BR>
Apr 28 14:11:59 vpn pluto[2304]: packet from x.x.x.x:500: ignoring Vendor ID<BR>
payload [MS NT5 ISAKMPOAKLEY 00000004]<BR>
Apr 28 14:11:59 vpn pluto[2304]: packet from x.x.x.x:500: ignoring Vendor ID<BR>
payload [FRAGMENTATION]<BR>
Apr 28 14:11:59 vpn pluto[2304]: packet from x.x.x.x:500: received Vendor ID<BR>
payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106<BR>
Apr 28 14:11:59 vpn pluto[2304]: packet from x.x.x.x:500: ignoring Vendor ID<BR>
payload [Vid-Initial-Contact]<BR>
Apr 28 14:11:59 vpn pluto[2304]: "roadwarrior-l2tp"[18] x.x.x.x #50:<BR>
responding to Main Mode from unknown peer x.x.x.x<BR>
Apr 28 14:11:59 vpn pluto[2304]: "roadwarrior-l2tp"[18] x.x.x.x #50:<BR>
transition from state STATE_MAIN_R0 to state STATE_MAIN_R1<BR>
Apr 28 14:11:59 vpn pluto[2304]: "roadwarrior-l2tp"[18] x.x.x.x #50:<BR>
STATE_MAIN_R1: sent MR1, expecting MI2<BR>
Apr 28 14:11:59 vpn pluto[2304]: "roadwarrior-l2tp"[18] x.x.x.x #50:<BR>
NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: no NAT<BR>
detected<BR>
Apr 28 14:11:59 vpn pluto[2304]: "roadwarrior-l2tp"[18] x.x.x.x #50:<BR>
transition from state STATE_MAIN_R1 to state STATE_MAIN_R2<BR>
Apr 28 14:11:59 vpn pluto[2304]: "roadwarrior-l2tp"[18] x.x.x.x #50:<BR>
STATE_MAIN_R2: sent MR2, expecting MI3<BR>
Apr 28 14:11:59 vpn pluto[2304]: "roadwarrior-l2tp"[18] x.x.x.x #50: Main<BR>
mode peer ID is ID_IPV4_ADDR: 'x.x.x.x'<BR>
Apr 28 14:11:59 vpn pluto[2304]: "roadwarrior-l2tp"[18] x.x.x.x #50: I did<BR>
not send a certificate because I do not have one.<BR>
Apr 28 14:11:59 vpn pluto[2304]: "roadwarrior-l2tp"[18] x.x.x.x #50:<BR>
transition from state STATE_MAIN_R2 to state STATE_MAIN_R3<BR>
Apr 28 14:11:59 vpn pluto[2304]: "roadwarrior-l2tp"[18] x.x.x.x #50:<BR>
STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY<BR>
cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048}<BR>
Apr 28 14:11:59 vpn pluto[2304]: "roadwarrior-l2tp"[18] x.x.x.x #51:<BR>
responding to Quick Mode {msgid:a4e15be6}<BR>
Apr 28 14:11:59 vpn pluto[2304]: "roadwarrior-l2tp"[18] x.x.x.x #51:<BR>
transition from state STATE_QUICK_R0 to state STATE_QUICK_R1<BR>
Apr 28 14:11:59 vpn pluto[2304]: "roadwarrior-l2tp"[18] x.x.x.x #51:<BR>
STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2<BR>
Apr 28 14:11:59 vpn pluto[2304]: "roadwarrior-l2tp"[18] x.x.x.x #51:<BR>
transition from state STATE_QUICK_R1 to state STATE_QUICK_R2<BR>
Apr 28 14:11:59 vpn pluto[2304]: "roadwarrior-l2tp"[18] x.x.x.x #51:<BR>
STATE_QUICK_R2: IPsec SA established {ESP=>0x85e963f7 <0xb55e7810<BR>
xfrm=3DES_0-HMAC_MD5 NATD=none DPD=none}<BR>
<BR>
</FONT>
</P>
</BODY>
</HTML>