[Openswan Users] not enough room in input packet for ISAKMP Message

Markus Hüwe markus at huewe.de
Mon Jul 12 15:28:14 CEST 2004


Hi,

i try to connect to VPN Gateway:

my config:

version 2.0

config setup
        interfaces=%defaultroute
        nat_traversal=no
        klipsdebug=all
        uniqueids=yes

conn %default
        authby=secret
        left=XXX.XXX.XXX.XXX
        leftsubnet=192.168.100.0/25 # geändert
        keyingtries=0

conn DX
        authby=secret
        left=XXX.XXX.XXX.XXX
        leftsubnet=192.168.100.0/25
        leftnexthop=%defaultroute
        auto=start
        rightnexthop=%defaultroute
        right=XXX.XXX.XXX.XXX
        pfs=yes
        keyexchange=ike
        auth=esp
        esp=3des-sha-96
        


Jul 12 14:21:44 app1 pluto[12432]: "D2" #1: ignoring Vendor ID payload
[Dead Peer Detection]
Jul 12 14:21:44 app1 pluto[12432]: "D2" #1: ignoring Vendor ID payload
[Cisco-Unity]
Jul 12 14:21:44 app1 pluto[12432]: "D2" #1: ignoring Vendor ID payload
[4cc95c698aac6218...]
Jul 12 14:21:44 app1 pluto[12432]: "D2" #1: transition from state
STATE_MAIN_I2 to state STATE_MAIN_I3
Jul 12 14:21:44 app1 pluto[12432]: "D2" #1: Peer ID is ID_IPV4_ADDR:
'XXX.XXX.XXX.XXX'
Jul 12 14:21:44 app1 pluto[12432]: "D2" #1: transition from state
STATE_MAIN_I3 to state STATE_MAIN_I4
Jul 12 14:21:44 app1 pluto[12432]: "D2" #1: ISAKMP SA established
Jul 12 14:21:44 app1 pluto[12432]: "D2" #2: initiating Quick Mode
PSK+ENCRYPT+TUNNEL+PFS+UP {using isakmp#1}
Jul 12 14:21:44 app1 pluto[12432]: "D2" #1: ignoring informational
payload, type IPSEC_INITIAL_CONTACT
Jul 12 14:21:44 app1 pluto[12432]: "D2" #1: ignoring informational
payload, type NO_PROPOSAL_CHOSEN


Then I get: "not enough room in input packet for ISAKMP Message"

Any ideas?

Thanks,
Markus



More information about the Users mailing list