[Openswan Users] IKE / ESP options

Paul Wouters paul at xelerance.com
Fri Apr 30 14:32:26 EDT 2010


On Fri, 30 Apr 2010, Danilo Godec wrote:

>> Apr 30 09:14:22 fw pluto[15466]: "mytunnel-net" #4: sent MR3, ISAKMP
>> SA established
>> Apr 30 09:14:22 fw pluto[15466]: "mytunnel-net" #5: no acceptable
>> Proposal in IPsec SA

Your phase2 paramters are misconfigured between the endpoints

> Unfortunately I have other active tunnels and if I set 'klipsdebug' or
> 'plutodebug' to 'all' I get flooded with messages. Is there a way to
> enable debugging just for one of the tunnels?

No, because a lot of it is a state machine.

Paul


More information about the Users mailing list