<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:st1="urn:schemas-microsoft-com:office:smarttags" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceType"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="PlaceName"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:Arial;
color:windowtext;}
@page Section1
{size:595.3pt 841.9pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.Section1
{page:Section1;}
-->
</style>
</head>
<body lang=EN-GB link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Hi All,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>I am trying to connect to a VPN using IPSec, but have had
problems connecting. I have a windows based SonicWall Global VPN client program
that will connect to the SonicWall router. I have tried to replicate these
details in the ipsec.conf as below:<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>config setup<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> dumpdir=/var/run/pluto/<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> nat_traversal=yes<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:25.0.0.0/8,%v6:fd00::/8,%v6:fe80::/10<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> oe=off<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> protostack=auto<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> interfaces="ipsec0=eth0"<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>conn sonicwall<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> type=tunnel<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> left=172.16.XX.XX (my IP)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> leftnexthop=172.16.255.255 (my
gateway)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> leftid=@GroupVPN<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> leftxauthclient=yes<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> right=XX.XX.XX.XX (IP address of my
sonicwall router)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> rightsubnet=XX.XX.XX.XX/24 (gateway
IP of my LAN)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> rightxauthserver=yes<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> rightid=@0006XXXXXXXX<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> keyingtries=0<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> keyexchange=ike<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> pfs=no<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> aggrmode=yes<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> auto=add<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> auth=esp<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> esp=aes256-sha1 <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> ike=aes256-sha1-modp1024<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'> authby=secret<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Below is the output given when running the command “ipsec
whack --listen --name sonicwall --initiate --xauthname XXXXXX --xauthpass XXXXXX”.
Seems as though it fails on the second phase auth and I am unsure what else to
try.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>It has taken me a few days to get this far so any help would
be much appreciated.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Many thanks,<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Stuart<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: initiating Aggressive Mode #12, connection
"sonicwall"<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
pluto_do_crypto: helper (0) is exiting <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]: | setting sec:
1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: ignoring Vendor ID payload [Sonicwall 1 (TZ 170
Standard?)]<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: ignoring unknown Vendor ID payload [5bXXXXXXXXXXXX]<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: received Vendor ID payload [RFC 3947] method set
to=109 <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: received Vendor ID payload [Dead Peer Detection]<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: received Vendor ID payload [XAUTH]<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: Aggressive mode peer ID is ID_FQDN: '@0006XXXXXXXX'<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: NAT-Traversal: Result using RFC 3947
(NAT-Traversal): i am NATed<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
pluto_do_crypto: helper (0) is exiting <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: transition from state STATE_AGGR_I1 to state
STATE_AGGR_I2<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: STATE_AGGR_I2: sent AI2, ISAKMP SA established
{auth=OAKLEY_PRESHARED_KEY cipher=aes_256 prf=oakley_sha group=modp1024}<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: XAUTH: Answering XAUTH challenge with user='XXXXXX’<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: transition from state STATE_XAUTH_I0 to state
STATE_XAUTH_I1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: STATE_XAUTH_I1: XAUTH client - awaiting CFG_set<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: ignoring informational payload, type
IPSEC_INITIAL_CONTACT msgid=00000000<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: received and ignored informational message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: XAUTH: Successfully Authenticated<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: transition from state STATE_XAUTH_I0 to state
STATE_XAUTH_I1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]: "sonicwall"
#12: STATE_XAUTH_I1: XAUTH client - awaiting CFG_set<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #13: initiating Quick Mode
PSK+ENCRYPT+TUNNEL+UP+AGGRESSIVE+IKEv2ALLOW {using isakmp#12 msgid:46f6c0a8
proposal=AES(12)_256-SHA1(2)_160 pfsgroup=no-pfs}<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
pluto_do_crypto: helper (0) is exiting <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: ignoring informational payload, type
INVALID_ID_INFORMATION msgid=00000000<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:38:40 localhost pluto[26053]:
"sonicwall" #12: received and ignored informational message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:10 localhost pluto[26053]:
"sonicwall" #12: ignoring informational payload, type
INVALID_ID_INFORMATION msgid=00000000<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:10 localhost pluto[26053]:
"sonicwall" #12: received and ignored informational message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #13: max number of retransmissions (2) reached
STATE_QUICK_I1. No acceptable response to our first Quick Mode message:
perhaps peer likes no roposal<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #13: starting keying attempt 2 of an unlimited number,
but releasing whack<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #14: initiating Aggressive Mode #14, connection
"sonicwall"<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #14: pluto_do_crypto: helper (0) is exiting <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]: | setting sec:
1<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #14: ignoring Vendor ID payload [Sonicwall 1 (TZ 170
Standard?)]<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #14: ignoring unknown Vendor ID payload [5bXXXXXXXXXXXXXX]<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #14: received Vendor ID payload [RFC 3947] method set
to=109 <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #14: received Vendor ID payload [Dead Peer Detection]<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #14: received Vendor ID payload [XAUTH]<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #14: Aggressive mode peer ID is ID_FQDN: '@0006XXXXXXXX'<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #14: NAT-Traversal: Result using RFC 3947
(NAT-Traversal): i am NATed<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #14: pluto_do_crypto: helper (0) is exiting <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #14: transition from state STATE_AGGR_I1 to state
STATE_AGGR_I2<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #14: STATE_AGGR_I2: sent AI2, ISAKMP SA established
{auth=OAKLEY_PRESHARED_KEY cipher=aes_256 prf=oakley_sha group=modp1024}<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #14: XAUTH username requested, but no file descriptor
available for prompt<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:39:50 localhost pluto[26053]:
"sonicwall" #14: sending encrypted notification CERTIFICATE_UNAVAILABLE
to XX.XX.XX.XX:4500 (IP address of my sonicwall router) <o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:43:56 localhost pluto[26053]:
"sonicwall" #12: received Delete SA payload: deleting <st1:place
w:st="on"><st1:PlaceName w:st="on">ISAKMP</st1:PlaceName> <st1:PlaceType w:st="on">State</st1:PlaceType></st1:place>
#12<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:43:56 localhost pluto[26053]: packet from XX.XX.XX.XX:4500:
received and ignored informational message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:43:56 localhost pluto[26053]: packet from XX.XX.XX.XX:4500:
ignoring informational payload, type INVALID_COOKIE on st==NULL (deleted?)<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'>Feb 2 13:43:56 localhost pluto[26053]: packet from XX.XX.XX.XX:4500:
received and ignored informational message<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=2 face=Arial><span style='font-size:10.0pt;
font-family:Arial'><o:p></o:p></span></font></p>
</div>
</body>
</html>