[Openswan Users] Phase1 IKE working ? Phase2 apparently not

t.henneberger at hcs-computer.de t.henneberger at hcs-computer.de
Mon Sep 27 10:08:59 CEST 2004


Hello

I am trying to conntect to my VPN Server at 192.168.1.35 which
is a Suse 9.1 with 2.6.4 Kernel and Openswan 2.1.5 (RPM build).

The PC who is trying to establish the connection is a Win2k machine
in the same subnet (192.168.1.110). I use a tool called Bintec IPsec
Client to establish a connection with a Preshared Key.

Below is the log my IPsec Client generates. It looks like Phase1 was 
succesfull, as all 6 Messages are send (if I try a connect
with a false password the connection ends with MSG5). 
My guess is that the connection is not established because my 
client can't resolve a IPsec Security-Association?

Maybe someone has in Idea where the problem might be?

Bintec IPsec Client Log:
10:17:22  IPSDIALCHAN::start building connection
10:17:22  NCPIKE-phase1:name(Interner Test) - outgoing connect request - main mode.
10:17:22  XMIT_MSG1_MAIN - Interner Test
10:17:22  RECV_MSG2_MAIN - Interner Test
10:17:22  XMIT_MSG3_MAIN - Interner Test
10:17:22  IPSDIAL->FINAL_TUNNEL_ENDPOINT:192.168.001.035
10:17:22  RECV_MSG4_MAIN - Interner Test
10:17:22  XMIT_MSG5_MAIN - Interner Test
10:17:22  RECV_MSG6_MAIN - Interner Test
10:17:22  NCPIKE-phase1:name(Interner Test) - connected
10:17:22  XMIT_IKECFG_REQUEST - Interner Test
10:17:34  NCPIKE-phase2:name(Interner Test) - error - cleared by phase1
10:17:34  IPSDIAL  - disconnected from Interner Test on channel 1.

Thanks, and greetings from Germany.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20040927/e7bd5cc4/attachment.htm


More information about the Users mailing list