Hi.<br><br>I'm trying to run a vpn between one machine running a cisco asa, and the other running openswan. The openswan end is under my control.<br><br>The openswan end is a VPS running centos 5.4.<br><br>The tunnel definition is:<br>
<br>conn tunnelipsec<br> type= tunnel<br> authby= secret<br> left= a.b.c.d<br> leftsourceip= p.q.r.s<br> leftnexthop= %defaultroute<br> leftsubnet= <a href="http://192.168.2.0/24">192.168.2.0/24</a><br>
right= l.m.n.o<br> rightnexthop= %defaultroute<br> rightsubnet= ef.f.g.h/24<br> ike= aes128-sha1-modp1024<br> esp= aes128-sha1<br> keyexchange= ike<br>
pfs= yes<br> auto= start<br> keylife= 86400s<br><br clear="all">I've obviously censored the IP addresses involved.<br><br>I get various messages in the logs, at the moment I'm seeing a lot of:<br>
<br>Dec 14 14:56:11 foo pluto[20102]: "tunnelipsec" #11: ignoring informational payload, type INVALID_SPI msgid=00000000<br><br>The VPN works fine for a few hours, then drops. I've not worked out what the trigger is.<br>
<br>-- <br>Michael Stevens<br>Dianomi Ltd<br>18 Buckingham Gate<br>London SW1E 6LB<br><br>Tel: 020 7802 5530<br>Fax: 020 7630 7356<br><a href="http://www.dianomi.com">www.dianomi.com</a><br><br>The information in this message and any attachment is intended for the addressee and is confidential and may be subject to legal privilege. Dianomi Ltd, Registered Office: One America Square, Crosswall, London. EC3N 2SG. Registered in England and Wales with Company Registration Number 4513809. VAT registration number: 809754988 <br>