[Openswan Users] Openswan 2.6.24 => Juniper SRX

[Paul Wouters]

On Fri, 4 Feb 2011, Scott T. Cameron wrote:

> 000 #37: "idc":500 STATE_QUICK_I1 (sent QI1, expecting QR1); EVENT_RETRANSMIT in 14s;
> lastdpd=-1s(seq in:0 out:0); idle;

The other end rejected your phase1. Try to find out why.

> syslog snip:
> Feb  4 20:20:53 meta pluto[29438]: initiate on demand from 192.168.90.11:45819 to
> 172.30.77.45:514 proto=6 state: fos_start
> because: acquire

You sure this is not from an older version?

> Seems to be the same issue, in general.  First IPSEC tunnel goes up, but it stays in hold state

It does not come up....

Paul