[Openswan Users] Suddenly service is interrupted.

[Paul Wouters]

On Thu, 16 Dec 2004, Marco Perrando wrote:

> A road-warrior connection that worked until yesterday now send an 
> INVALID_COOKIE message as the third message on negotiation, and, as a 
> consquence (I guess) it resends another packet for a new Security 
> association.
>
> But its 'Security Parameter Index' reports EXACTLY the two cookies that were 
> sent in packet #2!!!
> Why does it say INVALID_COOKIE?
> What cookies should arrive?

It might mean phase 1 works fine, and things go wrong in phase two. It then
just tries to redo phase 2 and not phase 1.
Can you show the log on the openswan end?

Paul