[Openswan Users] Malformed payload
Alessio
alessio.fattorini at gmail.com
Mon Jul 18 15:54:20 CEST 2005
I have setup a VPN connection using this howto
http://www.natecarlson.com/linux/ipsec-l2tp.php
When i connect from my Windows host, the connection failed and auth.log reports
thos errors..
Jul 18 12:22:52 randa pluto[21612]: packet from 212.28.**.**:500: ignoring
Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
Jul 18 12:22:52 randa pluto[21612]: packet from 212.28.**.**:500: ignoring
Vendor ID payload [FRAGMENTATION]
Jul 18 12:22:52 randa pluto[21612]: packet from 212.28.**.**:500: ignoring
Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
Jul 18 12:22:52 randa pluto[21612]: packet from 212.28.**.**:500: ignoring
Vendor ID payload [26244d38eddb61b3...]
Jul 18 12:22:52 randa pluto[21612]: "roadwarrior-l2tp"[3] 212.28.**.** #3:
responding to Main Mode from unknown peer 212.28.**.**
Jul 18 12:22:53 randa pluto[21612]: "roadwarrior-l2tp"[3] 212.28.**.** #3: next
payload type of ISAKMP Hash Payload has an unknown value: 22
Jul 18 12:22:53 randa pluto[21612]: "roadwarrior-l2tp"[3] 212.28.**.** #3:
malformed payload in packet
Jul 18 12:22:53 randa pluto[21612]: "roadwarrior-l2tp"[3] 212.28.**.** #3:
sending encrypted notification PAYLOAD_MALFORMED to 212.28.160.44:500
Jul 18 12:22:53 randa pluto[21612]: "roadwarrior-l2tp"[3] 212.28.**.** #3: next
payload type of ISAKMP Hash Payload has an unknown value: 78
Jul 18 12:22:53 randa pluto[21612]: "roadwarrior-l2tp"[3] 212.28.**.** #3:
malformed payload in packet
Jul 18 12:22:53 randa pluto[21612]: "roadwarrior-l2tp"[3] 212.28.**.** #3:
sending encrypted notification PAYLOAD_MALFORMED to 212.28.**.**:500
This is my ipsec.conf.
Do you have any idea?
# basic configuration
config setup
# Debug-logging controls: "none" for (almost) none, "all" for lots.
# klipsdebug=all
# plutodebug=all
# crlcheckinterval=600
# strictcrlpolicy=yes
interfaces="ipsec0=eth1"
nat_traversal=yes
virtual_private=%v4:192.168.2.0/24
#conn %default
# rightrsasigkey=%cert
# leftrsasigkey=%cert
conn %default
keyingtries=1
compress=yes
disablearrivalcheck=no
authby=rsasig
leftrsasigkey=%cert
rightrsasigkey=%cert
# OE policy groups are disabled by default
conn block
auto=ignore
conn clear
auto=ignore
conn private
auto=ignore
conn private-or-clear
auto=ignore
conn clear-or-private
auto=ignore
conn clear
auto=ignore
conn packetdefault
auto=ignore
conn roadwarrior-net
leftsubnet=192.168.2.0/255.255.255.0
also=roadwarrior
conn roadwarrior-all
leftsubnet=0.0.0.0/0
also=roadwarrior
conn roadwarrior
left=85.44.**.**
leftcert=randa.pem
right=%any
rightsubnet=vhost:%no,%priv
auto=add
pfs=yes
conn roadwarrior-l2tp
type=transport
left=85.44.**.**
leftcert=randa.pem
leftprotoport=17/1701
right=%any
rightprotoport=17/1701
pfs=no
auto=add
conn roadwarrior-l2tp-oldwin
left=85.44.**.**
leftcert=randa.pem
leftprotoport=17/0
right=%any
rightprotoport=17/1701
rightsubnet=vhost:%no,%priv
pfs=no
auto=add
More information about the Users
mailing list