[Openswan Users] openswan 2.2.0 and sonicwall

TorkildUlvøy Resheim torkildr at resheim.no
Fri Jan 21 12:47:58 CET 2005


I've been spending all day trying to get this configuration to work, to no 
avail. Could someone please point me to some documentation explaining this 
particlar setup, or give me some ideas. When starting the connection I'm 
getting:

002 "emmaedb" #1: initiating Main Mode
104 "emmaedb" #1: STATE_MAIN_I1: initiate
003 "emmaedb" #1: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
002 "emmaedb" #1: enabling possible NAT-traversal with method RFC XXXX 
(NAT-Traversal)
002 "emmaedb" #1: transition from state STATE_MAIN_I1 to state STATE_MAIN_I2
106 "emmaedb" #1: STATE_MAIN_I2: sent MI2, expecting MR2
003 "emmaedb" #1: ignoring Vendor ID payload [404bf439522ca3f6]
003 "emmaedb" #1: ignoring Vendor ID payload [XAUTH]
002 "emmaedb" #1: I did not send a certificate because I do not have one.
003 "emmaedb" #1: NAT-Traversal: Result using 
draft-ietf-ipsec-nat-t-ike-02/03:i am NATed
002 "emmaedb" #1: transition from state STATE_MAIN_I2 to state STATE_MAIN_I3
108 "emmaedb" #1: STATE_MAIN_I3: sent MI3, expecting MR3
003 "emmaedb" #1: Informational Exchange message must be encrypted
003 "emmaedb" #1: discarding duplicate packet; already STATE_MAIN_I3
010 "emmaedb" #1: STATE_MAIN_I3: retransmission; will wait 20s for response
003 "emmaedb" #1: discarding duplicate packet; already STATE_MAIN_I3
010 "emmaedb" #1: STATE_MAIN_I3: retransmission; will wait 40s for response
003 "emmaedb" #1: discarding duplicate packet; already STATE_MAIN_I3
031 "emmaedb" #1: max number of retransmissions (2) reached STATE_MAIN_I3.  
Possible authentication failure: no acceptable response to our first 
encrypted message
000 "emmaedb" #1: starting keying attempt 2 of at most 3, but releasing whack

-- 
Med vennlig hilsen / Kind regards                                  ((
Torkild Ulvøy Resheim, Senior Systemutvikler / Software Engineer    ))
Emma EDB AS, Trondheim, Norway. http://www.emmaedb.no             |----|_
Private pages: http://resheim.no - "Any sufficiently advanced     |    | )
bug is indistinguishable from a feature."                         |____|'
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.openswan.org/pipermail/users/attachments/20050121/4152f5c2/attachment.bin


More information about the Users mailing list