[Openswan Users] Message ID is 0 with openswan as client to cisco 876W

[Paul Wouters]

On Thu, 11 Dec 2008, Markus Locher wrote:

> Connection has to be established from an OpenSuse-10.3 server to an CISCO router (876w).
> - Openswan IPsec U2.6.19/K2.6.27.5
> - Kernel as above
> 
> 
> The problem is that it simply does not work!  Nearly 10000 configuration steps are being done till now.
> My question is:  What the hell means the "Message ID of 0" and how to hell do I get a valid Message ID!

> 002 "L2TPPSKCLIENT" #1: transition from state STATE_MAIN_I2 to state STATE_MAIN_I3
> 108 "L2TPPSKCLIENT" #1: STATE_MAIN_I3: sent MI3, expecting MR3
> 003 "L2TPPSKCLIENT" #1: Informational Exchange message is invalid because it has a Message ID of 0

That looks like a broken implementation or something messing with the packets. Try upgrading the
firmware of the Cisco, and check if there is any NAT router on the path with "ipsec passthrough"
enabled.

Paul