<br><br><div class="gmail_quote">On Tue, Jan 18, 2011 at 8:36 PM, Paul Wouters <span dir="ltr"><<a href="mailto:paul@xelerance.com">paul@xelerance.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div class="im">On Tue, 18 Jan 2011, Kaushal Shriyan wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
Hi Paul<br>
<br>
Please have a look at <a href="http://paste.ubuntu.com/555411/" target="_blank">http://paste.ubuntu.com/555411/</a><br>
</blockquote>
<br></div>
initiate on demand from <a href="http://10.0.0.119:8" target="_blank">10.0.0.119:8</a> to <a href="http://172.17.6.175:0" target="_blank">172.17.6.175:0</a> proto=1 state: fos_start because: acquire<br>
<br>
You did not add oe=no in your "config setup" or you removed it? please put it back there.<br>
<br>
"sonicwall" #1: STATE_MAIN_I4: ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_md5 group=modp1024}<br>
<br>
phase1 is up.<br>
<br>
"sonicwall" #2: STATE_QUICK_I2: sent QI2, IPsec SA established tunnel mode {ESP=>0x4287be14 <0xc60d8692 xfrm=3DES_0-HMAC_MD5 NATOA=none NATD=none DPD=enabled}<br>
<br>
phase2 is up.<br>
<br>
but meanwhile you also race with another connection which ends in:<br>
<br>
"sonicwall" #4: Oakley Transform [OAKLEY_3DES_CBC (192), OAKLEY_SHA1, OAKLEY_GROUP_MODP1024] refused due to strict flag<br>
<br>
So it seems the sonic wall might want esp=3des-sha1;modp1024<br><font color="#888888">
<br>
<br>
Paul<br>
</font></blockquote></div><br>Hi,<br><br>Please suggest me a good tutorial to understand IPSec and openswan<br>I am missing the concepts.<br><br>Thanks<br><br>Kaushal<br><br><br>