[Openswan Users] malfomed payload errors

Geoff Galitz geoff at galitz.org
Sun Oct 11 17:00:07 EDT 2009


 

 

Good day,

 

I am having trouble connecting to a Checkpoint FW-1.  I don't have access to
the remote logs.  Here is the debug output:

 

http://pastebin.com/m3f98e30a

 

The config file is:

 

----------------------------------------------------------------------------
------------------------------------

version 2.0     # conforms to second version of ipsec.conf specification

 

config setup

        plutodebug="control parsing emitting"

        nat_traversal=yes

        OE=off

        protostack=netkey

 

 

conn remotet

 

        left=x.x.x.x  # nat host ip

        leftid=x.x.x.x # public ip

        leftnexthop=%defaultroute

        right=x.x.x.x

        rightnexthop=%defaultroute

        auth=esp

        authby=secret

        auto=add

        pfs=yes

        ike=3des-sha1-modp1024

        esp=3des-sha1,aes-md5

        keyexchange=ike

        ikelifetime=1440m

        keylife=3660s

#      ikev2=yes

 

---------------------------------
Geoff Galitz
Blankenheim NRW, Germany
http://www.galitz.org/
http://german-way.com/blog/

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20091011/7a59b394/attachment.html 


More information about the Users mailing list