[Openswan Users] Problem with some road connection
Sasa
sasa at shoponweb.it
Mon Jan 18 11:42:37 EST 2010
Hi, I have a problem with a road connection (with site-to-site it's ok) but
it's very strange because this problem is present only with some road
connection (with other road connection is all ok), when the vpn client is
impossible connect to my vpn server I have in log:
Jan 18 17:00:54 fwsos pluto[13618]: packet from 217.x.y.z:500: ignoring
Vendor ID payload [Vid-Initial-Contact]
Jan 18 17:00:54 fwsos pluto[13618]: "left-road"[1] 217.x.y.z #8: responding
to Main Mode from unknown peer 217.x.y.z
Jan 18 17:00:54 fwsos pluto[13618]: "left-road"[1] 217.x.y.z #8: transition
from state STATE_MAIN_R0 to state STATE_MAIN_R1
Jan 18 17:00:54 fwsos pluto[13618]: "left-road"[1] 217.x.y.z #8:
STATE_MAIN_R1: sent MR1, expecting MI2
Jan 18 17:01:10 fwsos pluto[13618]: packet from 217.x.y.z:500: ignoring
Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
Jan 18 17:01:10 fwsos pluto[13618]: packet from 217.x.y.z:500: ignoring
Vendor ID payload [FRAGMENTATION]
Jan 18 17:01:10 fwsos pluto[13618]: packet from 217.x.y.z:500: received
Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106
Jan 18 17:01:10 fwsos pluto[13618]: packet from 217.x.y.z:500: ignoring
Vendor ID payload [Vid-Initial-Contact]
Jan 18 17:01:10 fwsos pluto[13618]: "left-road"[1] 217.x.y.z #9: responding
to Main Mode from unknown peer 217.x.y.z
Jan 18 17:01:10 fwsos pluto[13618]: "left-road"[1] 217.x.y.z #9: transition
from state STATE_MAIN_R0 to state STATE_MAIN_R1
Jan 18 17:01:10 fwsos pluto[13618]: "left-road"[1] 217.x.y.z #9:
STATE_MAIN_R1: sent MR1, expecting MI2
Jan 18 17:01:42 fwsos pluto[13618]: packet from 217.x.y.z:500: ignoring
Delete SA payload: not encrypted
Jan 18 17:01:42 fwsos pluto[13618]: packet from 217.x.y.z:500: received and
ignored informational message
Jan 18 17:01:50 fwsos pluto[13618]: "left-road"[1] 217.x.y.z #5: max number
of retransmissions (2) reached STATE_MAIN_R1
My ipsec.conf is:
config setup
virtual_private=%v4:192.168.0.0/16,%v4:172.16.0.0/12,%v4:!192.168.1.0/24
nat_traversal=yes
conn %default
authby=rsasig
esp=3des-md5
conn frattacis
auto=start
authby=rsasig
pfs=yes
left=82.x.x.x
leftsubnet=192.168.1.0/24
leftnexthop=82.x.x.z
leftrsasigkey=0sAQO.
right=82.y.y.y
rightsubnet=192.168.0.0/24
rightnexthop=82.y.y.z
rightrsasigkey=0sAQ.
conn left-road
auto=add
authby=secret
pfs=no
rekey=no
left=82.x.x.x
leftnexthop=82.x.x.z
leftprotoport=17/1701
right=%any
rightprotoport=17/1701
rightsubnet=vhost:%no,%priv
include /etc/ipsec.d/examples/no_oe.conf
I use osw-2.4.7 and xl2tpd-1.1.
Thanks.
------
Salvatore.
More information about the Users
mailing list