[Openswan Users] Setup hangs on 'STATE_QUICK_I1: initiate'

[Paul Wouters]

On Tue, 6 Dec 2005, Bruno Diniz wrote:

> I'm trying to configure a road warrior node to access a private network
> whose router I administer. My laptop is running openswan 2.4.0 and the
> router has openswan 2.2.0. I configured both ends, but when I start the
> connection, it gives me the following output and hangs:
>
> root at amilcar:/etc# ipsec auto --verbose --up road-lcc-cluster64
> 002 "road-lcc-cluster64" #7: initiating Main Mode
> 104 "road-lcc-cluster64" #7: STATE_MAIN_I1: initiate
> 002 "road-lcc-cluster64" #7: transition from state STATE_MAIN_I1 to state
> STATE_MAIN_I2
> 106 "road-lcc-cluster64" #7: STATE_MAIN_I2: sent MI2, expecting MR2
> 002 "road-lcc-cluster64" #7: I did not send a certificate because I do not
> have one.
> 002 "road-lcc-cluster64" #7: transition from state STATE_MAIN_I2 to state
> STATE_MAIN_I3
> 108 "road-lcc-cluster64" #7: STATE_MAIN_I3: sent MI3, expecting MR3
> 002 "road-lcc-cluster64" #7: Main mode peer ID is ID_FQDN: '@
> cluster64.speed.dcc.ufmg.br'
> 002 "road-lcc-cluster64" #7: transition from state STATE_MAIN_I3 to state
> STATE_MAIN_I4
> 004 "road-lcc-cluster64" #7: STATE_MAIN_I4: ISAKMP SA established
> {auth=OAKLEY_RSA_SIG cipher=oakley_3des_cbc_192 prf=oakley_md5
> group=modp1536}
> 002 "road-lcc-cluster64" #8: initiating Quick Mode
> RSASIG+ENCRYPT+TUNNEL+PFS+UP {using isakmp#7}
> 117 "road-lcc-cluster64" #8: STATE_QUICK_I1: initiate
> 010 "road-lcc-cluster64" #8: STATE_QUICK_I1: retransmission; will wait 20s
> for response
> 010 "road-lcc-cluster64" #8: STATE_QUICK_I1: retransmission; will wait 40s
> for response

The other end is logging the real error. this end is just transmitting.
check the logs there.

Paul