<html><head><meta http-equiv="Content-Type" content="text/html charset=windows-1252"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Rescued from the spam bucket. Please remember to subscribe to the mailing list before posting to it.<div><br></div><div><div><br><div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(127, 127, 127, 1.0);"><b>From: </b></span><span style="font-family:'Helvetica'; font-size:medium;">"Lionel Bernhardt" <<a href="mailto:lionel.bernhardt@eurocash.eu">lionel.bernhardt@eurocash.eu</a>><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(127, 127, 127, 1.0);"><b>Subject: </b></span><span style="font-family:'Helvetica'; font-size:medium;"><b>Random connection error (timeout) for clients</b><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(127, 127, 127, 1.0);"><b>Date: </b></span><span style="font-family:'Helvetica'; font-size:medium;">12 November, 2012 10:40:32 AM EST<br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(127, 127, 127, 1.0);"><b>To: </b></span><span style="font-family:'Helvetica'; font-size:medium;"><<a href="mailto:users@lists.openswan.org">users@lists.openswan.org</a>><br></span></div><br><br><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"><meta name="Generator" content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Texte de bulles Car";
margin:0cm;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";
mso-fareast-language:EN-US;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.TextedebullesCar
{mso-style-name:"Texte de bulles Car";
mso-style-priority:99;
mso-style-link:"Texte de bulles";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 70.85pt 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--><div lang="FR" link="blue" vlink="purple"><div class="WordSection1"><p class="MsoNormal"><span lang="EN-US">Hello,<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">I am experiencing a weird problem with my server.<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Randomly, some users (PC with 3G internet access) can get a timeout error when trying to connect to the server. The connection problem can sometimes be solved with a PC reboot but not anytime.<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">The strange thing is that while he’s trying to connect, I can separately connect with my 3G phone connection without any trouble.<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">This problem occurs randomly but most often daytime.<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">I didn’t experience it with my ADSL internet connection from home.<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US"> </span></p><p class="MsoNormal"><span lang="EN-US">The only thing I noted in /var/log/auth.log is : <o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US"> </span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:48:46 vpn pluto[1292]: packet from 80.214.9.52:3241: received and ignored informational message<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:18 vpn pluto[1292]: packet from 80.214.1.57:15211: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:18 vpn pluto[1292]: packet from 80.214.1.57:15211: ignoring Vendor ID payload [FRAGMENTATION]<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:18 vpn pluto[1292]: packet from 80.214.1.57:15211: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:18 vpn pluto[1292]: packet from 80.214.1.57:15211: ignoring Vendor ID payload [Vid-Initial-Contact]<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:18 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: responding to Main Mode from unknown peer 80.214.1.57<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:18 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:18 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: STATE_MAIN_R1: sent MR1, expecting MI2<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: peer is NATed<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: STATE_MAIN_R2: sent MR2, expecting MI3<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: Main mode peer ID is ID_FQDN: '@eurocash-67caee'<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[575] 80.214.1.57 #1028: switched from "L2TP-PSK-NAT" to "L2TP-PSK-NAT"<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: deleting connection "L2TP-PSK-NAT" instance with peer 80.214.1.57 {isakmp=#0/ipsec=#0}<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: new NAT mapping for #1028, was 80.214.1.57:15211, now 80.214.1.57:38379<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp2048}<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: peer client type is FQDN<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: Applying workaround for MS-818043 NAT-T bug<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: IDci was FQDN: \303\006\214+, using NAT_OA=10.211.63.77/32 0 as IDci<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: the peer proposed: xxx.xxx.xxx.xxx/32:17/1701 -> 10.211.63.77/32:17/0<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: responding to Quick Mode proposal {msgid:6de05eb8}<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: us: xxx.xxx.xxx.xxx<xxx.xxx.xxx.xxx>[+S=C]:17/1701<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: them: 80.214.1.57[@eurocash-67caee,+S=C]:17/1701===10.211.63.77/32<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: transition from state STATE_QUICK_R0 to state STATE_QUICK_R1<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: STATE_QUICK_R1: sent QR1, inbound IPsec SA installed, expecting QI2<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: netlink_raw_eroute: WARNING: that_client port 0 and that_host port 1701 don't match. Using that_client port.<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:19 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1029: STATE_QUICK_R2: IPsec SA established transport mode {ESP=>0xb714c51c <0xb93bea89 xfrm=3DES_0-HMAC_MD5 NATOA=10.211.63.77 NATD=80.214.1.57:38379 DPD=none}<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:21 vpn pluto[1292]: initiate on demand from xxx.xxx.xxx.xxx:1701 to 80.214.1.57:1701 proto=17 state: fos_start because: acquire<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:54 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: received Delete SA(0xb714c51c) payload: deleting IPSEC State #1029<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:54 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: ERROR: netlink XFRM_MSG_DELPOLICY response for flow eroute_connection delete included errno 2: No such file or directory<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:54 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: received and ignored informational message<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:55 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57 #1028: received Delete SA payload: deleting ISAKMP State #1028<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Nov 12 15:50:55 vpn pluto[1292]: "L2TP-PSK-NAT"[576] 80.214.1.57: deleting connection "L2TP-PSK-NAT" instance with peer 80.214.1.57 {isakmp=#0/ipsec=#0}<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US"> </span></p><p class="MsoNormal"><span lang="EN-US"> </span></p><p class="MsoNormal"><span lang="EN-US">How can I solve this one?<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">Thanks for your valuable help.<o:p></o:p></span></p><p class="MsoNormal"><span lang="EN-US">lionel<o:p></o:p></span></p><p class="MsoNormal"><o:p> </o:p></p></div></div><br><br></div></div><br></div></body></html>