<div dir="ltr">Hi Gents,<div><br></div><div>Has anyone heard of issues with OpenSwan\ipsec connecting to Cisco VPN SPA module devices?</div><div><br></div><div>We have openswan connected just happily to Cisco ASA and other concentrators. But it really does not like phase 1 communication.</div>
<div><br></div><div>Here's the clean hands shown by Cisco TAC:</div><div><br></div><div>"<span style="font-family:arial,sans-serif;font-size:13px"> </span><span style="font-family:arial,sans-serif;font-size:13px">I see from the debugs that right after phase 1 completed on vpn-spa end, linux machine sends some unencrypted packets which is not recognizable by the spa. Therefore we try to retransmit the last packet and then tear down the tunnel, so the whole phase 1 starts from the beginning.</span></div>
<p style="font-family:arial,sans-serif;font-size:13px">As I said VPN-SPA is End of Life:<u></u><u></u></p><p style="font-family:arial,sans-serif;font-size:13px"><a href="http://www.cisco.com/en/US/prod/collateral/modules/ps6267/end_of_life_c51-583910.html" target="_blank"><span style="color:windowtext;text-decoration:none">http://www.cisco.com/en/US/prod/collateral/modules/ps6267/end_of_life_c51-583910.html</span></a><u></u><u></u></p>
<p style="font-family:arial,sans-serif;font-size:13px">This means engineering support finished already at 2012, so we have no chance anymore to ask development team about this issue.</p><p style="font-family:arial,sans-serif;font-size:13px">
Please try to troubleshoot the linux and may be different distribution or version of openswan."</p><p style="font-family:arial,sans-serif;font-size:13px">I am running - openswan-2.6.32-21.el6_4.x86_64 - of OpenSwan</p>
<p style="font-family:arial,sans-serif;font-size:13px">Thoughts?</p><p style="font-family:arial,sans-serif;font-size:13px"><br></p></div>