[Openswan Users] Openswan-win2k

[Norman Rasmussen]

I'm guessing that your config file isn't set up correctly.  It should
be saying 'responding to Main Mode from unknown peer 67.118.246.28'. 
Have you told ipsec to listen on 63.193.114.85 in the config file?
(left=63.193.114.85)

On 09/06/05, Jerome Kaidor <jerry at tr4.tr2.com> wrote:
> Norman Rasmussen wrote:
> >
> > If you want windows to set you up with l2tp, then you only need to
> > configure a 'virtual private connection' and set the type of network
> > to 'l2tp ipsec vpn'.  Then when you try and dial XP will establish the
> > ipsec tunnel, and try and login to your l2tp daemon, which will use
> > ppp to create the connection - giving you an ip on the network, and
> > access to the other machines.
> >
> *** So what about the error messages in /var/log/secure?
> 
> 
> > > Win2k laptop, I get the following messages in /var/log/secure:
> > > -------------------- snip ---------------------
> > > Jun  8 09:38:30 tr4 pluto[3545]: packet from 67.118.246.28:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
> > > Jun  8 09:38:30 tr4 pluto[3545]: packet from 67.118.246.28:500: ignoring Vendor ID payload [FRAGMENTATION]
> > > Jun  8 09:38:30 tr4 pluto[3545]: packet from 67.118.246.28:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] meth=106, but port floating is off
> > > Jun  8 09:38:30 tr4 pluto[3545]: packet from 67.118.246.28:500: ignoring Vendor ID payload [Vid-Initial-Contact]
> > > Jun  8 09:38:30 tr4 pluto[3545]: packet from 67.118.246.28:500: initial Main Mode message received on 63.193.114.85:500 but no connection has been authorized
> > > ------------------ endsnip --------------------
> > >
>                 - Jerry Kaidor
> 


-- 
- Norman Rasmussen
 - Email: norman at rasmussen.co.za
 - Home page: http://norman.rasmussen.co.za/