[Openswan Users] next event EVENT_PENDING_DDNS in 53 seconds

Luis Fernando Gramajo lgramajo at empagua.com
Tue Jun 12 19:16:56 EDT 2012


Hi there... its me again... So finally got phase 1 running...

117 "telefonica/2x0" #3: STATE_QUICK_I1: initiate
002 "telefonica/1x0" #2: transition from state STATE_QUICK_I1 to state 
STATE_QUICK_I2
004 "telefonica/1x0" #2: STATE_QUICK_I2: sent QI2, IPsec SA established 
tunnel mode {ESP/NAT=>0x8db5c863 <0x089b6f17 xfrm=3DES_0-HMAC_SHA1 
NATOA=none NATD=none DPD=none}
002 "telefonica/2x0" #3: transition from state STATE_QUICK_I1 to state 
STATE_QUICK_I2
004 "telefonica/2x0" #3: STATE_QUICK_I2: sent QI2, IPsec SA established 
tunnel mode {ESP/NAT=>0x298f3fea <0x181f4b5a xfrm=3DES_0-HMAC_SHA1 
NATOA=none NATD=none DPD=none}


But still in the log:

| inserting event EVENT_SA_REPLACE, timeout in 2952 seconds for #3
| event added after event EVENT_PENDING_PHASE2
"telefonica/2x0" #3: STATE_QUICK_I2: sent QI2, IPsec SA established 
tunnel mode {ESP=>0x19ed24ac <0x540cac3b xfrm=3DES_0-HMAC_SHA1 
NATOA=none NATD=none DPD=none}
| modecfg pull: noquirk policy:push not-client
| phase 1 is done, looking for phase 2 to unpend
| * processed 0 messages from cryptographic helpers
| next event EVENT_PENDING_DDNS in 53 seconds
| next event EVENT_PENDING_DDNS in 53 seconds


So i executed the ipsec verify and got

Opportunistic Encryption DNS checks:
    Looking for TXT in forward dns zone: TeleVPN                 [MISSING]
    Does the machine have at least one non-private address?      [OK]
    Looking for TXT in reverse dns zone: 210.80.x.x.in-addr.arpa.    
[MISSING]

My ips gives me the dns service... feels kinda of  weird... do I have to 
add the peer to it?

thanks


-- 
Luis Fernando Gramajo P.
Redes y Telecomunicaciones
Sistemas de Información EMPAGUA



More information about the Users mailing list