<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
p
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";}
pre
{margin:0in;
margin-bottom:.0001pt;
font-size:10.0pt;
font-family:"Courier New";}
tt
{font-family:"Courier New";}
span.EmailStyle21
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Have you checked your PSK?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Regards,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'>Randy<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 color=navy face=Arial><span style='font-size:
10.0pt;font-family:Arial;color:navy'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='text-align:center'><font size=3
face="Times New Roman"><span style='font-size:12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal><b><font size=2 face=Tahoma><span style='font-size:10.0pt;
font-family:Tahoma;font-weight:bold'>From:</span></font></b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> users-bounces@openswan.org
[mailto:users-bounces@openswan.org] <b><span style='font-weight:bold'>On Behalf
Of </span></b>emil@stoynev.us<br>
<b><span style='font-weight:bold'>Sent:</span></b> Friday, February 19, 2010
12:40 PM<br>
<b><span style='font-weight:bold'>To:</span></b> users@openswan.org<br>
<b><span style='font-weight:bold'>Subject:</span></b> [Openswan Users] IPSec
VPN Tunnel Connection ...Please Help.....</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p style='margin:0in;margin-bottom:.0001pt'><font size=4 face="Times New Roman"><span
style='font-size:13.5pt'>Hello, I am getting this error when I try to bring up
IPSec Tunnel... Looking</span></font><o:p></o:p></p>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
13.5pt'>for someone help.. Thanks...</span></font> <o:p></o:p></p>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
<div>
<p><strong><b><font size=2 face=Arial><span style='font-size:10.0pt;font-family:
Arial'>Starting connection with command </span></font></b></strong><tt><b><font
size=2 face="Courier New"><span style='font-size:10.0pt;font-weight:bold'>/usr/sbin/ipsec
auto --up 'paycode-to-vivacom'</span></font></b></tt><strong><b><font size=2
face=Arial><span style='font-size:10.0pt;font-family:Arial'> ..</span></font></b></strong><font
size=2 face=Arial><span style='font-size:10.0pt;font-family:Arial'><o:p></o:p></span></font></p>
<pre><font size=1 face="Courier New"><span style='font-size:8.0pt'><o:p> </o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>104 "paycode-to-vivacom" #10: STATE_MAIN_I1: initiate<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>003 "paycode-to-vivacom" #10: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106 <o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>003 "paycode-to-vivacom" #10: ignoring Vendor ID payload [FRAGMENTATION c0000000]<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>106 "paycode-to-vivacom" #10: STATE_MAIN_I2: sent MI2, expecting MR2<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>003 "paycode-to-vivacom" #10: received Vendor ID payload [Cisco-Unity]<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>003 "paycode-to-vivacom" #10: received Vendor ID payload [XAUTH]<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>003 "paycode-to-vivacom" #10: ignoring unknown Vendor ID payload [4acca7967b99500430ae278225d941bf]<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>003 "paycode-to-vivacom" #10: ignoring Vendor ID payload [Cisco VPN 3000 Series]<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>003 "paycode-to-vivacom" #10: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: no NAT detected<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>108 "paycode-to-vivacom" #10: STATE_MAIN_I3: sent MI3, expecting MR3<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>010 "paycode-to-vivacom" #10: STATE_MAIN_I3: retransmission; will wait 20s for response<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>003 "paycode-to-vivacom" #10: discarding duplicate packet; already STATE_MAIN_I3<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>003 "paycode-to-vivacom" #10: discarding duplicate packet; already STATE_MAIN_I3<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>003 "paycode-to-vivacom" #10: discarding duplicate packet; already STATE_MAIN_I3<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>010 "paycode-to-vivacom" #10: STATE_MAIN_I3: retransmission; will wait 40s for response<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>003 "paycode-to-vivacom" #10: next payload type of ISAKMP Hash Payload has an unknown value: 125<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>003 "paycode-to-vivacom" #10: malformed payload in packet<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>031 "paycode-to-vivacom" #10: max number of retransmissions (2) reached STATE_MAIN_I3. Possible authentication failure: no acceptable response to our first encrypted message<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'>000 "paycode-to-vivacom" #10: starting keying attempt 2 of at most 3, but releasing whack<o:p></o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'><o:p> </o:p></span></font></pre><pre><font
size=1 face="Courier New"><span style='font-size:8.0pt'><br>
<br>
<o:p></o:p></span></font></pre><pre><font size=1 face="Courier New"><span
style='font-size:8.0pt'><o:p> </o:p></span></font></pre></div>
<div>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
13.5pt'>ipsec.conf >>>>> </span></font> <o:p></o:p></p>
</div>
<div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>conn paycode-to-vivacom <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> auth=esp <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> authby=secret <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> auto=start <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> esp=3des-168 <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> ike=3des-md5 <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> ikelifetime=8h <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> keyexchange=ike <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> keyingtries=3 <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> keylife=1h <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> left=95.43.208.250 <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> leftid=95.43.208.250 <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> leftnexthop=95.43.208.249 <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> pfs=yes <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> right=212.39.72.21 <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> rightsubnet=10.16.0.0/24 <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> type=tunnel <o:p></o:p></span></font></p>
</div>
<div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>config setup <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> interfaces=%defaultroute <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> nat_traversal=yes <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> OE=off <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'> protostack=netkey <o:p></o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
</div>
</div>
<div>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
13.5pt'>Connection Configuration
>>> http://i48.tinypic.com/1823ba.jpg</span></font> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
13.5pt'>The OS is Debian Squeeze</span></font> <o:p></o:p></p>
</div>
<div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
</div>
<div>
<p class=MsoNormal><font size=4 face="Times New Roman"><span style='font-size:
13.5pt'>paycode:~# ipsec verify<br>
Checking your system to see if IPsec got installed and started correctly:<br>
Version check and ipsec on-path
[OK]<br>
Linux Openswan U2.6.23/K2.6.32-trunk-686 (netkey)<br>
Checking for IPsec support in kernel
[OK]<br>
NETKEY detected, testing for disabled ICMP send_redirects
[OK]<br>
NETKEY detected, testing for disabled ICMP accept_redirects [OK]<br>
Checking for RSA private key (/etc/ipsec.secrets)
[OK]<br>
Checking that pluto is running
[OK]<br>
Pluto listening for IKE on udp 500
[OK]<br>
Pluto listening for NAT-T on udp 4500
[OK]<br>
Two or more interfaces found, checking IP forwarding
[OK]<br>
Checking NAT and MASQUERADEing
[OK]<br>
Checking for 'ip' command
[OK]<br>
Checking for 'iptables' command
[OK]<br>
Opportunistic Encryption Support
[DISABLED]<br>
paycode:~#</span></font> <o:p></o:p></p>
</div>
</div>
</body>
</html>