[Openswan Users] what does this mean?

[shawnlau]

Hi ALL!

When I use x509 way, on my right server , error like below:

 

104 "ntn" #1: STATE_MAIN_I1: initiate

003 "ntn" #1: received Vendor ID payload [Openswan (this version) 2.6.21 ]

003 "ntn" #1: received Vendor ID payload [Dead Peer Detection]

003 "ntn" #1: received Vendor ID payload [RFC 3947] method set to=109 

106 "ntn" #1: STATE_MAIN_I2: sent MI2, expecting MR2

003 "ntn" #1: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): no NAT
detected

108 "ntn" #1: STATE_MAIN_I3: sent MI3, expecting MR3

003 "ntn" #1: received Vendor ID payload [CAN-IKEv2]

004 "ntn" #1: STATE_MAIN_I4: ISAKMP SA established {auth=OAKLEY_RSA_SIG
cipher=aes_128 prf=oakley_sha group=modp2048}

117 "ntn" #2: STATE_QUICK_I1: initiate

 

 

Then I checked left vpnserver's secrets log file ,shows like below:

 

Invalid argument

Apr  3 17:02:05 left pluto[16151]: | add_sa ipcomp failed

Apr  3 17:02:05 left pluto[16151]: | failed to install outgoing SA: 0

Apr  3 17:02:05 left pluto[16151]: "ntn" #1: max number of retransmissions
(2) reached STATE_MAIN_R2

Apr  3 17:02:43 left pluto[16151]: "ntn" #2: the peer proposed:
10.255.255.0/27:0/0 -> 172.16.255.0/26:0/0

Apr  3 17:02:43 left pluto[16151]: "ntn" #6: responding to Quick Mode
proposal {msgid:d2c24dbf}

Apr  3 17:02:43 left pluto[16151]: "ntn" #6:     us:
10.255.255.0/27===192.168.1.8<192.168.1.8>[+S=C]

Apr  3 17:02:43 left pluto[16151]: "ntn" #6:   them:
192.168.1.7<192.168.1.7>[+S=C]===172.16.255.0/26

Apr  3 17:02:43 left pluto[16151]: "ntn" #6: ERROR: netlink response for Add
SA comp.6b44 at 192.168.1.7 included errno 22: Invalid argument

Apr  3 17:02:43 left pluto[16151]: | add_sa ipcomp failed

Apr  3 17:02:43 left pluto[16151]: | failed to install outgoing SA: 0

Apr  3 17:02:55 left pluto[16151]: "ntn" #2: the peer proposed:
10.255.255.0/27:0/0 -> 172.16.255.0/26:0/0

Apr  3 17:02:55 left pluto[16151]: "ntn" #7: responding to Quick Mode
proposal {msgid:d2c24dbf}

Apr  3 17:02:55 left pluto[16151]: "ntn" #7:     us:
10.255.255.0/27===192.168.1.8<192.168.1.8>[+S=C]

Apr  3 17:02:55 left pluto[16151]: "ntn" #7:   them:
192.168.1.7<192.168.1.7>[+S=C]===172.16.255.0/26

Apr  3 17:02:55 left pluto[16151]: "ntn" #7: ERROR: netlink response for Add
SA comp.6b44 at 192.168.1.7 included errno 22: Invalid argument

Apr  3 17:02:55 left pluto[16151]: | add_sa ipcomp failed

Apr  3 17:02:55 left pluto[16151]: | failed to install outgoing SA: 0

Apr  3 17:03:16 left pluto[16151]: "ntn" #2: the peer proposed:
10.255.255.0/27:0/0 -> 172.16.255.0/26:0/0

Apr  3 17:03:16 left pluto[16151]: "ntn" #8: responding to Quick Mode
proposal {msgid:d2c24dbf}

Apr  3 17:03:16 left pluto[16151]: "ntn" #8:     us:
10.255.255.0/27===192.168.1.8<192.168.1.8>[+S=C]

Apr  3 17:03:16 left pluto[16151]: "ntn" #8:   them:
192.168.1.7<192.168.1.7>[+S=C]===172.16.255.0/26

Apr  3 17:03:16 left pluto[16151]: "ntn" #8: ERROR: netlink response for Add
SA comp.6b44 at 192.168.1.7 included errno 22: Invalid argument

Apr  3 17:03:16 left pluto[16151]: | add_sa ipcomp failed

Apr  3 17:03:16 left pluto[16151]: | failed to install outgoing SA: 0

 

 

For openswan, I feel too tired. 

 

Shawn~  Still with my best regards!!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20090403/df51a3b6/attachment-0001.html