<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=ISO-8859-1">
</head>
<body bgcolor="#ffffff" text="#000000">
Hello,<br>
<br>
I've configured Openswan to create an IPSec tunnel with a Cisco
router. However, tunnel seems not being activated. Could anyone
tell me if, according to auth.log tunnel connection is complete?<br>
<br>
It drives me a little crazy that it states "IPsec SA established" as
well as "event after this is EVENT_PENDING_PHASE2 in 100 seconds".<br>
<br>
Here's the log file when starting ipsec service:<br>
<br>
============<br>
Mar 31 08:45:38 FTPS pluto[3840]: | our client is 10.176.80.202<br>
Mar 31 08:45:38 FTPS pluto[3840]: | our client protocol/port is 0/0<br>
Mar 31 08:45:38 FTPS pluto[3840]: | peer client is 195.235.178.19<br>
Mar 31 08:45:38 FTPS pluto[3840]: | peer client protocol/port is 0/0<br>
Mar 31 08:45:38 FTPS pluto[3840]: | compute_proto_keymat:needed_len
(after ESP enc)=24<br>
Mar 31 08:45:38 FTPS pluto[3840]: | compute_proto_keymat:needed_len
(after ESP auth)=44<br>
Mar 31 08:45:38 FTPS pluto[3840]: | install_ipsec_sa() for #2:
inbound and outbound<br>
Mar 31 08:45:38 FTPS pluto[3840]: | route owner of "myConnection"
prospective erouted: self; eroute owner: self<br>
Mar 31 08:45:38 FTPS pluto[3840]: | could_route called for
myConnection (kind=CK_PERMANENT)<br>
Mar 31 08:45:38 FTPS pluto[3840]: | add inbound eroute
195.235.178.19/32:0 --0-> 10.176.80.202/32:0 =>
<a class="moz-txt-link-abbreviated" href="mailto:tun.10000@46.38.161.90">tun.10000@46.38.161.90</a> (raw_eroute)<br>
Mar 31 08:45:39 FTPS pluto[3840]: | sr for #2: prospective erouted<br>
Mar 31 08:45:39 FTPS pluto[3840]: | route owner of "myConnection"
prospective erouted: self; eroute owner: self<br>
Mar 31 08:45:39 FTPS pluto[3840]: | eroute_connection replace eroute
10.176.80.202/32:0 --0-> 195.235.178.19/32:0 =>
<a class="moz-txt-link-abbreviated" href="mailto:tun.0@195.235.178.36">tun.0@195.235.178.36</a> (raw_eroute)<br>
Mar 31 08:45:39 FTPS pluto[3840]: | command executing up-client<br>
Mar 31 08:45:39 FTPS pluto[3840]: | executing up-client: 2>&1
PLUTO_VERSION='1.1' PLUTO_VERB='up-client'
PLUTO_CONNECTION='myConnection' PLUTO_NEXT_HOP='46.38.161.1'
PLUTO_INTERFACE='eth0' PLUTO_ME='46.38.161.90'
PLUTO_MY_ID='46.38.161.90' PLUTO_MY_CLIENT='10.176.80.202/32'
PLUTO_MY_CLIENT_NET='10.176.80.202'
PLUTO_MY_CLIENT_MASK='255.255.255.255' PLUTO_MY_PORT='0'
PLUTO_MY_PROTOCOL='0' PLUTO_PEER='195.235.178.36'
PLUTO_PEER_ID='195.235.178.36' PLUTO_PEER_CLIENT='195.235.178.19/32'
PLUTO_PEER_CLIENT_NET='195.235.178.19'
PLUTO_PEER_CLIENT_MASK='255.255.255.255' PLUTO_PEER_PORT='0'
PLUTO_PEER_PROTOCOL='0' PLUTO_PEER_CA=''
PLUTO_CONN_POLICY='PSK+ENCRYPT+TUNNEL+UP' ipsec _updown<br>
Mar 31 08:45:39 FTPS pluto[3840]: | route_and_eroute:
firewall_notified: true<br>
Mar 31 08:45:39 FTPS pluto[3840]: | route_and_eroute: instance
"myConnection", setting eroute_owner {spd=0xe63b08,sr=0xe63b08} to
#2 (was #0) (newest_ipsec_sa=#0)<br>
Mar 31 08:45:39 FTPS pluto[3840]: | complete state transition with
STF_OK<br>
Mar 31 08:45:39 FTPS pluto[3840]: "myConnection" #2: transition from
state STATE_QUICK_I1 to state STATE_QUICK_I2<br>
Mar 31 08:45:39 FTPS pluto[3840]: | sending reply packet to
195.235.178.36:500 (from port=500)<br>
Mar 31 08:45:39 FTPS pluto[3840]: | sending 52 bytes for
STATE_QUICK_I1 through eth0:500 to 195.235.178.36:500:<br>
Mar 31 08:45:39 FTPS pluto[3840]: | inserting event
EVENT_SA_REPLACE, timeout in 27818 seconds for #2<br>
Mar 31 08:45:39 FTPS pluto[3840]: "myConnection" #2: STATE_QUICK_I2:
sent QI2, IPsec SA established {ESP=>0x4c3b8275 <0x482b8acf
xfrm=3DES_0-HMAC_SHA1 NATD=none DPD=none}<br>
Mar 31 08:45:39 FTPS pluto[3840]: | modecfg pull: noquirk
policy:push not-client<br>
Mar 31 08:45:39 FTPS pluto[3840]: | phase 1 is done, looking for
phase 1 to unpend<br>
Mar 31 08:45:39 FTPS pluto[3840]: | next event EVENT_NAT_T_KEEPALIVE
in 19 seconds<br>
Mar 31 08:45:58 FTPS pluto[3840]: |<br>
Mar 31 08:45:58 FTPS pluto[3840]: | *time to handle event<br>
Mar 31 08:45:58 FTPS pluto[3840]: | handling event
EVENT_NAT_T_KEEPALIVE<br>
Mar 31 08:45:58 FTPS pluto[3840]: | event after this is
EVENT_PENDING_PHASE2 in 100 seconds<br>
Mar 31 08:45:58 FTPS pluto[3840]: | processing connection
myConnection<br>
Mar 31 08:45:58 FTPS pluto[3840]: | processing connection
myConnection<br>
Mar 31 08:45:58 FTPS pluto[3840]: | next event EVENT_PENDING_PHASE2
in 100 seconds<br>
============<br>
<br>
Thanks a million and best regards.<br>
<div class="moz-signature">-- <br>
<img src="cid:part1.05030509.07030101@twindocs.com" style="width:
120px; height: auto;">
<p style="font-family: Arial; font-size: 12px; color: rgb(85, 85,
85);"><b>Germán Latorre Antín</b><br>
Principal Software Engineer<br>
TwinDocs - <a href="https://www.twindocs.com">https://www.twindocs.com</a>
<br>
(+34) 902 400 135
</p>
<p style="font-family: Verdana; font-size: 9px; font-style:
italic;" ;="">
Este mensaje es confidencial y para uso exclusivo de sus
destinatarios. / The information contained in this message is
intended for the exclusive use of its recipients.
</p>
</div>
</body>
</html>