[Openswan Users] openswan VPN problems

Ni Wenjuan niwj at cn.fujitsu.com
Thu Jul 30 04:40:51 EDT 2009


Paul Wouters 写道:
> On Thu, 30 Jul 2009, Ni Wenjuan wrote:
> 
>>>> 003 "net-to-net" #1: received Vendor ID payload [Dead Peer Detection]
>>>> 003 "net-to-net" #1: received Vendor ID payload [RFC 3947] method 
>>>> set to=109
>>>>
>>>> and after a few secods the information "padlock: VIA padlock not 
>>>> detected"
>>>> appears again.
>>>
>>
>> if we do "ipsec auto --up vpn " successfully ,after STATE_MAIN_I1, it 
>> will do STATE_MAIN_I2,STATE_MAIN_I3,STATE_MAIN_I4.... why it just does 
>> STATE_MAIN_I1 here? Does PADLOCK have something to do with this problem?
> 
> No the padlock has nothing to do with this. Your openswan simply crashed 
> and
> restarted, and during the daemon startup, openswan tries to load any 
> potential
> padlock crypto module.
> 

I figure out the "vpn" connection crashed at state STATE_MAIN_R1(sent MR1, expecting 
MI2) . I follow the net-to-net connection configure steps on 
http://wiki.openswan.org/index.php/Openswan/Configure
I tried several times, but it still fail at STATE_MAIN_R1 state . I don't know why. 
Can you help me out ?
thanks.



More information about the Users mailing list