<br><br><div class="gmail_quote">On Wed, Jan 19, 2011 at 11:03 AM, Kaushal Shriyan <span dir="ltr"><<a href="mailto:kaushalshriyan@gmail.com">kaushalshriyan@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="gmail_quote"><div class="im">On Tue, Jan 18, 2011 at 8:36 PM, Paul Wouters <span dir="ltr"><<a href="mailto:paul@xelerance.com" target="_blank">paul@xelerance.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204, 204, 204);padding-left:1ex">
<div>On Tue, 18 Jan 2011, Kaushal Shriyan wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204, 204, 204);padding-left:1ex">
Hi Paul<br>
<br>
Please have a look at <a href="http://paste.ubuntu.com/555411/" target="_blank">http://paste.ubuntu.com/555411/</a><br>
</blockquote>
<br></div>
initiate on demand from <a href="http://10.0.0.119:8" target="_blank">10.0.0.119:8</a> to <a href="http://172.17.6.175:0" target="_blank">172.17.6.175:0</a> proto=1 state: fos_start because: acquire<br>
<br>
You did not add oe=no in your "config setup" or you removed it? please put it back there.<br>
<br></blockquote></div><div><br>Hi Paul<br><br>I have added oe=no in config setup and restarted ipsec and terminate and initiated the ipsec service. The issue still persists.<br><br> </div><div class="im"><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204, 204, 204);padding-left:1ex">
"sonicwall" #1: STATE_MAIN_I4: ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_md5 group=modp1024}<br>
<br>
phase1 is up.<br>
<br>
"sonicwall" #2: STATE_QUICK_I2: sent QI2, IPsec SA established tunnel mode {ESP=>0x4287be14 <0xc60d8692 xfrm=3DES_0-HMAC_MD5 NATOA=none NATD=none DPD=enabled}<br>
<br>
phase2 is up.<br>
<br>
but meanwhile you also race with another connection which ends in:<br>
<br>
"sonicwall" #4: Oakley Transform [OAKLEY_3DES_CBC (192), OAKLEY_SHA1, OAKLEY_GROUP_MODP1024] refused due to strict flag<br>
<br>
So it seems the sonic wall might want esp=3des-sha1;modp1024<br><font color="#888888">
<br></font></blockquote></div><div><br>Not sure i understand it. so do i need to set "esp=3des-sha1;modp1024" in both VPN End points ? <br><div class="im"><br>Please suggest/guide<br><br>Thanks<br><br>Kaushal<br>
<br><br> <br></div></div>
<div><br> </div><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204, 204, 204);padding-left:1ex"><font color="#888888">
Paul<br>
</font></blockquote></div><br>
</blockquote></div>Hi Paul,<div><br></div><div>Please suggest/guide further about this issue.</div><div><br></div><div>Thanks</div><div><br></div><div>Kaushal</div>