[Openswan Users] stuck in STATE_MAIN_I3/STATE_MAIN_R2

[Herbert Xu]

Oskar Liljeblad <oskar at osk.mine.nu> wrote:
> 
> With tcpdump I'm seeing these packets on alpha:
> 
> 17:31:29.274391 IP alpha.isakmp > beta.isakmp: isakmp: phase 1 I ident
> 17:31:29.292350 IP beta.isakmp > alpha.isakmp: isakmp: phase 1 R ident
> 17:31:29.320873 IP alpha.isakmp > beta.isakmp: isakmp: phase 1 I ident
> 17:31:29.396066 IP beta.isakmp > alpha.isakmp: isakmp: phase 1 R ident
> 17:31:29.518108 IP alpha.isakmp > beta.isakmp: isakmp: phase 1 I ident[E]

The last packet never shows up on beta.  This is clearly a network
problem.  Check the packet size with tcpdump -v and see if there is
an MTU issue on that path.
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert at gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt