[Openswan Users] IKE / ESP options
Paul Wouters
paul at xelerance.com
Fri Apr 30 14:32:26 EDT 2010
On Fri, 30 Apr 2010, Danilo Godec wrote:
>> Apr 30 09:14:22 fw pluto[15466]: "mytunnel-net" #4: sent MR3, ISAKMP
>> SA established
>> Apr 30 09:14:22 fw pluto[15466]: "mytunnel-net" #5: no acceptable
>> Proposal in IPsec SA
Your phase2 paramters are misconfigured between the endpoints
> Unfortunately I have other active tunnels and if I set 'klipsdebug' or
> 'plutodebug' to 'all' I get flooded with messages. Is there a way to
> enable debugging just for one of the tunnels?
No, because a lot of it is a state machine.
Paul
More information about the Users
mailing list