[Openswan Users] problem with connection to Cisco 3000

Magosányi Árpád m4gw4s at gmail.com
Fri Nov 17 11:06:37 EST 2006


Hi!

I am trying to set up a connection to a cisco 3000. I get the following:
kusturica:~# ipsec auto --up warrior
040 "warrior": need PIN for reader: 0, id: 45
Enter secret:
004 "warrior": valid PIN
104 "warrior" #1: STATE_MAIN_I1: initiate
003 "warrior" #1: ignoring unknown Vendor ID payload
[4048b7d56ebce88525e7de7f00d6c2d3c0000000]
106 "warrior" #1: STATE_MAIN_I2: sent MI2, expecting MR2
010 "warrior" #1: STATE_MAIN_I2: retransmission; will wait 20s for response
003 "warrior" #1: encrypted Informational Exchange message is invalid
because no key is known
010 "warrior" #1: STATE_MAIN_I2: retransmission; will wait 40s for response
003 "warrior" #1: ignoring informational payload, type INVALID_COOKIE
003 "warrior" #1: received and ignored informational message
031 "warrior" #1: max number of retransmissions (2) reached STATE_MAIN_I2
000 "warrior" #1: starting keying attempt 2 of an unlimited number,
but releasing whack

And interestingly the cisco wants to send udp packets to my port 142.

What could be the problem?

versions:
openswan                 2.4.4-3ubuntu1, recompiled with chipcard support
kernel-image-2.6.18.2    10.00.Custom

Thank you for your help.


More information about the Users mailing list