[Openswan Users] lost one of two connections

[Vadim]

  19.09.2010 22:48, Paul Wouters пишет:
> On Sun, 19 Sep 2010, Vadim wrote:
>
>> And now i see almost every minute:
>>
>> Sep 19 18:02:29 vpn pluto[5125]: "net" #2: max number of 
>> retransmissions (2) reached STATE_QUICK_I1. No acceptable response to 
>> our first Quick Mode message: perhaps peer likes no proposal
>
> So the other end rejected you. Double check your configuration and 
> check the other end's
> logs if you can.
>
> Paul
Thank you, for your help.
Look at these logs please, again the 4.0 subnet became unavailable:

Sep 23 10:58:40 vpn pluto[7139]: "net-40" #68: initiating Quick Mode 
PSK+ENCRYPT+TUNNEL+PFS+UP+IKEv2ALLOW to replace #66 {using isakmp#67 
msgid:56220c67 proposal=3DES(3)_192-SHA1(2)_002 
pfsgroup=OAKLEY_GROUP_MODP1024}
Sep 23 10:58:40 vpn pluto[7139]: "net-40" #68: transition from state 
STATE_QUICK_I1 to state STATE_QUICK_I2
Sep 23 10:58:40 vpn pluto[7139]: "net-40" #68: STATE_QUICK_I2: sent QI2, 
IPsec SA established tunnel mode {ESP=>0xb28679aa <0x5beb6562 
xfrm=3DES_0-HMAC_SHA1 NATOA=none NATD=none DPD=none}
Sep 23 10:58:40 vpn pluto[7139]: "net-20" #67: received Delete 
SA(0xb28679a9) payload: deleting IPSEC State #66
Sep 23 10:58:40 vpn pluto[7139]: "net-20" #67: received and ignored 
informational message
Sep 23 10:58:40 vpn pluto[7139]: "net-20" #46: received Delete SA 
payload: deleting ISAKMP State #46
Sep 23 10:58:40 vpn pluto[7139]: packet from 83.220.49.234:500: received 
and ignored informational message

Sep 23 11:00:06 vpn pluto[7139]: "net-20" #69: initiating Quick Mode 
PSK+ENCRYPT+TUNNEL+PFS+IKEv2ALLOW to replace #65 {using isakmp#67 
msgid:2f918881 proposal=3DES(3)_192-SHA1(2)_002 
pfsgroup=OAKLEY_GROUP_MODP1024}
Sep 23 11:00:06 vpn pluto[7139]: "net-20" #69: transition from state 
STATE_QUICK_I1 to state STATE_QUICK_I2
Sep 23 11:00:06 vpn pluto[7139]: "net-20" #69: STATE_QUICK_I2: sent QI2, 
IPsec SA established tunnel mode {ESP=>0xb28679ab <0x7ab4253f 
xfrm=3DES_0-HMAC_SHA1 NATOA=none NATD=none DPD=none}
Sep 23 11:00:06 vpn pluto[7139]: "net-20" #67: received Delete 
SA(0xb28679a8) payload: deleting IPSEC State #65
Sep 23 11:00:06 vpn pluto[7139]: "net-20" #67: received and ignored 
informational message
Sep 23 11:00:22 vpn pluto[7139]: "net-40" #70: initiating Quick Mode 
PSK+ENCRYPT+TUNNEL+PFS+UP+IKEv2ALLOW {using isakmp#67 msgid:690d4b6c 
proposal=3DES(3)_192-SHA1(2)_002 pfsgroup=OAKLEY_GROUP_MODP1024}
Sep 23 11:00:22 vpn pluto[7139]: "net-40" #70: transition from state 
STATE_QUICK_I1 to state STATE_QUICK_I2
Sep 23 11:00:22 vpn pluto[7139]: "net-40" #70: STATE_QUICK_I2: sent QI2, 
IPsec SA established tunnel mode {ESP=>0xb28679ac <0x40c40f09 
xfrm=3DES_0-HMAC_SHA1 NATOA=none NATD=none DPD=none}
Sep 23 11:00:22 vpn pluto[7139]: "net-20" #67: received Delete 
SA(0xb28679aa) payload: deleting IPSEC State #68
Sep 23 11:00:22 vpn pluto[7139]: "net-20" #67: received and ignored 
informational message