[Openswan Users] Is there some List of error messages?
Wolfman
BulletinCatcher at web.de
Mon Mar 22 16:24:54 CET 2004
Hi,
finally my swan starts up and I get some logging an my Connection attempts.
But whenever I try to connect With my Win2k machine, I get errors (see
auth.log)
Somy question is: Is there some erroroverview to debug this messages? I
can't find anything in the net that helps.
Thanks
Christian
P.S. To the Gentoo users: The directory management is absolutly messed up.
The certs, Keys, CAcert everything has to go in /etc/ipsec/ipsec.d/.... not
in /etc/ipsec.d/...
the certs in certs, the keys in private etc... The Documentation for that
is wrong...
auth.log:
[...]
Mar 22 16:09:48 Linuxserver pluto[2919]: packet from 192.168.107.123:500:
ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000002]
Mar 22 16:09:48 Linuxserver pluto[2919]: packet from 192.168.107.123:500:
ignoring Vendor ID payload [FRAGMENTATION]
Mar 22 16:09:48 Linuxserver pluto[2919]: packet from 192.168.107.123:500:
received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but
already using method 0
Mar 22 16:09:48 Linuxserver pluto[2919]: "p2n"[3] 192.168.107.123 #3:
responding to Main Mode from unknown peer 192.168.107.123
Mar 22 16:09:48 Linuxserver pluto[2919]: "p2n"[3] 192.168.107.123 #3: only
OAKLEY_GROUP_MODP1024 and OAKLEY_GROUP_MODP1536 supported. Attribute
OAKLEY_GROUP_DESCRIPTION
Mar 22 16:09:48 Linuxserver pluto[2919]: "p2n"[3] 192.168.107.123 #3:
transition from state (null) to state STATE_MAIN_R1
Mar 22 16:09:48 Linuxserver pluto[2919]: "p2n"[3] 192.168.107.123 #3:
transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
Mar 22 16:09:48 Linuxserver pluto[2919]: "p2n"[3] 192.168.107.123 #3:
encrypted Informational Exchange message is invalid because it is for
incomplete ISAKMP SA
Mar 22 16:09:48 Linuxserver pluto[2919]: "p2n"[3] 192.168.107.123 #3:
encrypted Informational Exchange message is invalid because it is for
incomplete ISAKMP SA
Mar 22 16:09:58 Linuxserver pluto[2919]: "p2n"[3] 192.168.107.123 #3:
ignoring informational payload, type INVALID_COOKIE
[...]
More information about the Users
mailing list