<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=text/html;charset=iso-8859-1 http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.7600.16625"></HEAD>
<BODY style="PADDING-LEFT: 10px; PADDING-RIGHT: 10px; PADDING-TOP: 15px"
id=MailContainerBody leftMargin=0 topMargin=0 CanvasTabStop="true"
name="Compose message area">
<DIV><FONT face=Calibri>Hi everybody.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Calibri>I'm having a problem with a server opensuse using
openswan (last version obtained from official opensuse's repositories). Opensuse
11.3, kernel 2.6.34-12, openswan-2.6.27 (from source site)</FONT></DIV>
<DIV><FONT face=Calibri></FONT> </DIV>
<DIV><FONT face=Calibri>When i execute "ipsec setup start" and "ipse auto --up
vpn", the system works normally, but, after some hours, all system is freezed.
</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Calibri>I see some informations on messages file, like
this:</FONT></DIV>
<DIV><FONT face=Calibri></FONT> </DIV>
<DIV><FONT face=Calibri>Aug 2 16:46:27 pluto[3599]: "vpn" #1297: received
Delete SA payload: replace IPSEC State #1298 in 10 seconds<BR>Aug 2
16:46:27 pluto[3599]: "vpn" #1297: received and ignored informational
message<BR>Aug 2 16:46:27 pluto[3599]: "vpn" #1297: received Delete SA
payload: deleting ISAKMP State #1297<BR>Aug 2 16:46:27 pluto[3599]: packet
from 200.xxx:500: received and ignored informational message<BR>Aug 2
16:46:30 pluto[3599]: packet from 200.xxx:500: ignoring unknown Vendor ID
payload [4f454578616c467b5f6f606d]<BR>Aug 2 16:46:30 pluto[3599]: packet
from 200.xxx:500: received Vendor ID payload [Dead Peer Detection]<BR>Aug
2 16:46:30 pluto[3599]: "vpn" #1299: responding to Main Mode<BR>Aug 2
16:46:30 pluto[3599]: "vpn" #1299: transition from state STATE_MAIN_R0 to state
STATE_MAIN_R1<BR>Aug 2 16:46:30 [3599]: "vpn" #1299: STATE_MAIN_R1: sent
MR1, expecting MI2<BR>Aug 2 16:46:30 pluto[3599]: "vpn" #1299: transition
from state STATE_MAIN_R1 to state STATE_MAIN_R2<BR>Aug 2 16:46:30
pluto[3599]: "vpn" #1299: STATE_MAIN_R2: sent MR2, expecting MI3<BR>Aug 2
16:46:30 pluto[3599]: "vpn" #1299: Main mode peer ID is ID_FQDN:<BR>Aug 2
16:46:30 pluto[3599]: "vpn" #1299: transition from state STATE_MAIN_R2 to state
STATE_MAIN_R3<BR>Aug 2 16:46:30 pluto[3599]: "vpn" #1299: STATE_MAIN_R3:
sent MR3, ISAKMP SA established {auth=OAKLEY_RSA_SIG cipher=oakley_3des_cbc_192
prf=oakley_md5 group=modp1536}</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Calibri>And that its happens after to make estabilization
between servers</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Calibri>Aug 9 14:31:57 kernel: KLIPS mast0: no SA for
saref=17<BR>Aug 9 14:31:58 kernel: KLIPS mast0: no SA for
saref=17<BR>Aug 9 14:31:59 kernel: KLIPS mast0: no SA for
saref=17<BR>Aug 9 14:32:00 kernel: KLIPS mast0: no SA for
saref=17<BR>Aug 9 14:32:01 kernel: KLIPS mast0: no SA for
saref=17<BR>Aug 9 14:32:02 kernel: KLIPS mast0: no SA for
saref=17<BR>Aug 9 14:32:03 kernel: KLIPS mast0: no SA for
saref=17<BR>Aug 9 14:32:04 kernel: KLIPS mast0: no SA for
saref=17<BR>Aug 9 14:32:05 kernel: KLIPS mast0: no SA for
saref=17<BR>Aug 9 14:32:06 kernel: KLIPS mast0: no SA for
saref=17<BR>Aug 9 14:32:07 kernel: KLIPS mast0: no SA for
saref=17<BR>Aug 9 14:32:07 pluto[7679]: "vpn" #16: received Delete
SA(0x15ea5cda) payload: deleting IPSEC State #17<BR>Aug 9 14:32:07
pluto[7679]: "vpn" #16: received Delete SA payload: deleting ISAKMP State
#1</FONT></DIV>
<DIV> </DIV><FONT face=Calibri>
<DIV><BR>Is this some correlation between the freeze and messages?</DIV>
<DIV> </DIV>
<DIV>Tks for attention!</FONT></DIV>
<DIV><FONT face=Calibri></FONT> </DIV>
<DIV><FONT face=Calibri>Marcel de Lima<BR><A
title="mailto:delima_lima@yahoo.com.br CTRL + Clique para seguir o link"
href="mailto:delima_lima@yahoo.com.br">delima_lima@yahoo.com.br</A><BR>Lpci -
Level 2</FONT></DIV></BODY></HTML>