[Openswan Users] windows roadwarrior don't rekey!
foren titze
freeswan at gmx.net
Mon May 24 16:43:30 CEST 2004
hello users,
i have set up an ipsec/l2tp tunnel with x509 certs between windowsxp and linux
server.
our situation is that i have set the keylife to one hour for the roadwarrior,
because when the user of the notebook disconnect his internet-connection
before he closed the tunnel, the tunnel still be established. now I thought I
limit the time and so the tunnel breaks after the time of 20 minutes.
BUT the windows roadwarrior wouldn't rekey ( renegotiate ) the connection.
After this time, the tunnel collapses and I get this error message in
auth.log.
-------------------
May 24 14:46:23 linux-vpn pluto[5409]: "titze_laptop"[5] 62.96.xxx.131:4500
#19: IPsec SA expired (LATEST!)
May 24 14:46:24 linux-vpn pluto[5409]: "titze_laptop"[5] 62.96.xxx.131:4500
#23: responding to Quick Mode
May 24 14:46:24 linux-vpn pluto[5409]: "titze_laptop"[5] 62.96.xxx.131:4500
#23: transition from state (null) to state STATE_
QUICK_R1
May 24 14:46:24 linux-vpn pluto[5409]: "titze_laptop"[5] 62.96.xxx.131:4500
#24: initiating Quick Mode RSASIG+ENCRYPT+TUNNEL+
DISABLEARRIVALCHECK
May 24 14:46:24 linux-vpn pluto[5409]: ERROR: "titze_laptop"[5]
62.96.xxx.131:4500 #23: pfkey write() of SADB_X_ADDFLOW messa
ge 59 for flow esp.866856c7 at 62.96.xxx.131 failed. Errno 14: Bad address
May 24 14:46:24 linux-vpn pluto[5409]: | 02 0e 00 03 17 00 00 00 3b 00 00
00 21 15 00 00
May 24 14:46:24 linux-vpn pluto[5409]: | 02 00 01 00 86 68 56 c7 00 00 00
00 02 00 00 00
May 24 14:46:24 linux-vpn pluto[5409]: | 03 00 05 00 00 00 00 00 02 00 06
a5 3e 60 13 9c
May 24 14:46:24 linux-vpn pluto[5409]: | 00 00 00 00 00 00 00 00 03 00 06
00 00 00 00 00
May 24 14:46:24 linux-vpn pluto[5409]: | 02 00 06 a5 3e 60 13 83 00 00 00
00 00 00 00 00
May 24 14:46:24 linux-vpn pluto[5409]: | 03 00 15 00 00 00 00 00 02 00 06
a5 3e 60 13 9c
May 24 14:46:24 linux-vpn pluto[5409]: | 00 00 00 00 00 00 00 00 03 00 16
00 00 00 00 00
May 24 14:46:24 linux-vpn pluto[5409]: | 02 00 06 a5 3e 60 13 83 00 00 00
00 00 00 00 00
May 24 14:46:24 linux-vpn pluto[5409]: | 03 00 17 00 00 00 00 00 02 00 ff
ff ff ff ff ff
May 24 14:46:24 linux-vpn pluto[5409]: | 31 00 06 08 00 00 00 00 03 00 18
00 00 00 00 00
May 24 14:46:24 linux-vpn pluto[5409]: | 02 00 ff ff ff ff ff ff c0 c4 0f
08 65 73 70 2e
May 24 14:46:24 linux-vpn pluto[5409]: | 01 00 1a 00 11 00 00 00
May 24 14:46:24 linux-vpn pluto[5409]: "titze_laptop"[5] 62.96.xxx.131:4500
#18: ignoring informational payload, type INVALID
_ID_INFORMATION
-------------------
conn %default
dpdaction=clear
keylife=20m
keyingtries=3
disablearrivalcheck=yes
what's wrong?
thanks a lot
More information about the Users
mailing list