[Openswan Users] Problem with PSK and OAKLEY_AUTHENTICATION_METHOD

Joshua Lenmarc mootaccount at gmail.com
Thu Mar 20 16:34:12 EDT 2008


Same problem here. I get the following error. Any hints? Thanks!

112 "casc" #6: STATE_AGGR_I1: initiate
003 "casc" #6: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
003 "casc" #6: ignoring unknown Vendor ID payload [404bf439522ca3f6]
003 "casc" #6: received Vendor ID payload [XAUTH]
003 "casc" #6: Can't authenticate: no preshared key found for `@plap'
and `@Cas-Datacenter'. Attribute OAKLEY_AUTHENTICATION_METHOD
003 "casc" #6: no acceptable Oakley Transform
214 "casc" #6: STATE_AGGR_I1: NO_PROPOSAL_CHOSEN

<kay at decna.no> wrote on "Fri Jul 23 00:30:37 CEST 2004":
>
> Hello
>
> I'm trying to connect to a Sonicwall TZ170 with Openswan 2.1.3 under Debian.
>
> 104 "fswn-swll" #9: STATE_MAIN_I1: initiate
> 003 "fswn-swll" #9: Can't authenticate: no preshared key found for
> `local-ip' and `remote-ip'.  Attribute OAKLEY_AUTHENTICATION_METHOD
> 003 "fswn-swll" #9: no acceptable Oakley Transform
> 214 "fswn-swll" #9: STATE_MAIN_I1: NO_PROPOSAL_CHOSEN
>
> On the sonicwall the logs just say that the remote timed out.
>
> My ipsec.conf
>
> version 2.0
>
> include /etc/ipsec.d/examples/no_oe.conf
>
> conn fswn-swll
>         type=tunnel
>         auth=esp
>         authby=secret
>         keyingtries=0
>         ikelifetime=28800
>         keylife=5h
>         disablearrivalcheck=no
>         left=local-ip
>         leftsubnet=local-net/24
>         right=remote-ip
>         rightsubnet=remote-net/26
>         auto=add
>
> my ipsec.secrets
>
> local-ip remote-ip : PSK "mypsk"


More information about the Users mailing list