[Openswan Users] Intermittent disconnections

Ryan nospam at lucentflame.com
Mon Apr 4 14:38:13 CEST 2005


I have an FC3 box set up with openswan 2.3.0 and X.509 certificates for
authentication.  I'm trying to connect with a Windows XP SP2 box.  The XP
box is behind a router, but the FC3 machine is connected directly to the
internet.   I set it up roughly to this guide:

http://www.natecarlson.com/linux/ipsec-x509.php

It connects and functions fine for a while, but then it disconnects. Here
are what I think are relevent pieces of /var/log/secure.  At first I see
this many many times:

Apr  4 15:35:00 eri pluto[18065]: "roadwarrior-l2tp"[5] EXTIP:60440 #87:
received and ignored informational message
Apr  4 15:35:00 eri pluto[18065]: "roadwarrior-l2tp"[5] EXTIP:60440 #87:
received Delete SA(0x4f92d467) payload: deleting IPSEC State #212

With one line of this mixed into it:

Apr  4 15:33:20 eri pluto[18065]: ERROR: netlink XFRM_MSG_DELPOLICY
response for flow int.0 at 0.0.0.0 included errno 2: No such file or
directory

After those, I see many many lines of this:

Apr  4 15:35:04 eri pluto[18065]: "roadwarrior-l2tp"[6] EXTIP:60440 #195:
sending notification PAYLOAD_MALFORMED to EXTIP:60440
Apr  4 15:35:04 eri pluto[18065]: "roadwarrior-l2tp"[6] EXTIP:60440 #195:
next payload type of ISAKMP Hash Payload has an unknown value: 146
Apr  4 15:35:04 eri pluto[18065]: "roadwarrior-l2tp"[6] EXTIP:60440 #195:
malformed payload in packet

Then it is disconnected.

I've tried googling for the different error messages, but I can't find
anything that helps much.  Anyone have any ideas on where to start?  I'll
post config files if it helps.  Thanks for any help!!

Ryan



More information about the Users mailing list