[Openswan Users] help!!!!

[Paul Wouters]

On Mon, 21 Aug 2006, netanri netanri wrote:

> [root at localhost user]# ipsec auto --verbose --up net-to-net
> 002 "net-to-net" #1: initiating Main Mode
> 104 "net-to-net" #1: STATE_MAIN_I1: initiate
> 003 "net-to-net" #1: received Vendor ID payload [Openswan (this version) 2.4.6 X.509-1.5.4 PLUTO_SENDS_VENDORID PLUTO_USES_KEYRR]
> 003 "net-to-net" #1: received Vendor ID payload [Dead Peer Detection]
> 003 "net-to-net" #1: received Vendor ID payload [RFC 3947] method set to=110
> 002 "net-to-net" #1: enabling possible NAT-traversal with method 3
> 002 "net-to-net" #1: transition from state STATE_MAIN_I1 to state STATE_MAIN_I2
> 106 "net-to-net" #1: STATE_MAIN_I2: sent MI2, expecting MR2
> 002 "net-to-net" #1: I did not send a certificate because I do not have one.
> 003 "net-to-net" #1: NAT-Traversal: Result using 3: no NAT detected
> 002 "net-to-net" #1: transition from state STATE_MAIN_I2 to state STATE_MAIN_I3
> 108 "net-to-net" #1: STATE_MAIN_I3: sent MI3, expecting MR3
> 003 "net-to-net" #1: ignoring informational payload, type INVALID_KEY_INFORMATION
> 003 "net-to-net" #1: received and ignored informational message

You either have a misconfigured rsakey, or a mismatching leftid/rightid.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155