[Openswan Users] Aggressive mode connection error with Netopia

Fri Nov 29 03:52:16 UTC 2013

Dear Sirs,

Do you have any experience for the connection with Netopia?I try to setup the VPN tunnel with Netopia.Our environment is the openswan 2.6.38.Aggressive mode.
The following are the error logs.It seem that the openswan reject connection from Netopia.Because no any encrypted.Is it the configuration issue?or is there anything else I lose?

Can someone point me in the right direction?Please help,Thank's.

pluto[9450]: packet from 63.250.111.205:500: Quick Mode message is for a non-existent (expired?) ISAKMP SA
Nov 26 09:35:03 authpriv warn pluto[9450]: packet from 63.250.111.205:500: Quick Mode message is for a non-existent (expired?) ISAKMP SA
Nov 26 09:35:06 authpriv warn pluto[9450]: packet from 63.250.111.205:500: Informational Exchange is for an unknown (expired?) SA with MSGID:0xc11d6c7f
Nov 26 09:35:13 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: Aggressive mode peer ID is ID_USER_FQDN: 'testvpn at dsl4u.ca'
Nov 26 09:35:13 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: responding to Aggressive Mode, state #4, connection "ACI1" from 63.250.111.205
Nov 26 09:35:13 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: transition from state STATE_AGGR_R0 to state STATE_AGGR_R1
Nov 26 09:35:13 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: STATE_AGGR_R1: sent AR1, expecting AI2
Nov 26 09:35:13 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: packet rejected: should have been encrypted
Nov 26 09:35:13 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: sending notification INVALID_FLAGS to 63.250.111.205:500
Nov 26 09:35:13 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: next payload type of ISAKMP Hash Payload has an unknown value: 115
Nov 26 09:35:13 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: malformed payload in packet
Nov 26 09:35:13 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: sending notification PAYLOAD_MALFORMED to 63.250.111.205:500
Nov 26 09:35:14 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: Quick Mode message is unacceptable because it is for an incomplete ISAKMP SA
Nov 26 09:35:14 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: sending notification PAYLOAD_MALFORMED to 63.250.111.205:500
Nov 26 09:35:29 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: Quick Mode message is unacceptable because it is for an incomplete ISAKMP SA
Nov 26 09:35:29 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: sending notification PAYLOAD_MALFORMED to 63.250.111.205:500
Nov 26 09:35:44 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: Quick Mode message is unacceptable because it is for an incomplete ISAKMP SA
Nov 26 09:35:44 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: sending notification PAYLOAD_MALFORMED to 63.250.111.205:500
Nov 26 09:35:59 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: Quick Mode message is unacceptable because it is for an incomplete ISAKMP SA
Nov 26 09:35:59 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: sending notification PAYLOAD_MALFORMED to 63.250.111.205:500
Nov 26 09:36:14 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: Quick Mode message is unacceptable because it is for an incomplete ISAKMP SA
Nov 26 09:36:14 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: sending notification PAYLOAD_MALFORMED to 63.250.111.205:500
Nov 26 09:36:23 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205 #4: max number of retransmissions (2) reached STATE_AGGR_R1
Nov 26 09:36:23 authpriv warn pluto[9450]: "ACI1"[2] 63.250.111.205: deleting connection "ACI1" instance with peer 63.250.111.205 {isakmp=#0/ipsec=#0}
Nov 26 09:36:29 authpriv warn pluto[9450]: packet from 63.250.111.205:500: Quick Mode message is for a non-existent (expired?) ISAKMP SA
Nov 26 09:36:31 authpriv warn pluto[9450]: packet from 63.250.111.205:500: Quick Mode message is for a non-existent (expired?) ISAKMP SA
Nov 26 09:36:46 authpriv warn pluto[9450]: packet from 63.250.111.205:500: Quick Mode message is for a non-existent (expired?) ISAKMP SA
Nov 26 09:37:01 authpriv warn pluto[9450]: packet from 63.250.111.205:500: Quick Mode message is for a non-existent (expired?) ISAKMP SA
Nov 26 09:37:16 authpriv warn pluto[9450]: packet from 63.250.111.205:500: Quick Mode message is for a non-existent (expired?) ISAKMP SA
Nov 26 09:37:31 authpriv warn pluto[9450]: packet from 63.250.111.205:500: Quick Mode message is for a non-existent (expired?) ISAKMP SA
Nov 26 09:37:46 authpriv warn pluto[9450]: packet from 63.250.111.205:500: Quick Mode message is for a non-existent (expired?) ISAKMP SA
Nov 26 09:37:48 authpriv warn pluto[9450]: packet from 63.250.111.205:500: Informational Exchange is for an unknown (expired?) SA with MSGID:0x7f43dac9
Nov 26 09:37:58 authpriv warn pluto[9450]: "ACI1"[3] 63.250.111.205 #5: Aggressive mode peer ID is ID_USER_FQDN: 'testvpn at dsl4u.ca'
Nov 26 09:37:58 authpriv warn pluto[9450]: "ACI1"[3] 63.250.111.205 #5: responding to Aggressive Mode, state #5, connection "ACI1" from 63.250.111.205
Nov 26 09:37:58 authpriv warn pluto[9450]: "ACI1"[3] 63.250.111.205 #5: transition from state STATE_AGGR_R0 to state STATE_AGGR_R1
Nov 26 09:37:58 authpriv warn pluto[9450]: "ACI1"[3] 63.250.111.205 #5: STATE_AGGR_R1: sent AR1, expecting AI2
Nov 26 09:37:59 authpriv warn pluto[9450]: "ACI1"[3] 63.250.111.205 #5: packet rejected: should have been encrypted
Nov 26 09:37:59 authpriv warn pluto[9450]: "ACI1"[3] 63.250.111.205 #5: sending notification INVALID_FLAGS to 63.250.111.205:500
Nov 26 09:37:59 authpriv warn pluto[9450]: "ACI1"[3] 63.250.111.205 #5: next payload type of ISAKMP Hash Payload has an unknown value: 192
Nov 26 09:37:59 authpriv warn pluto[9450]: "ACI1"[3] 63.250.111.205 #5: malformed payload in packet
Nov 26 09:37:59 authpriv warn pluto[9450]: "ACI1"[3] 63.250.111.205 #5: sending notification PAYLOAD_MALFORMED to 63.250.111.205:500
Nov 26 09:37:59 authpriv warn pluto[9450]: "ACI1"[3] 63.250.111.205 #5: Quick Mode message is unacceptable because it is for an incomplete ISAKMP SA
Nov 26 09:38:14 authpriv warn pluto[9450]: "ACI1"[3] 63.250.111.205 #5: Quick Mode message is unacceptable because it is for an incomplete ISAKMP SA
Nov 26 09:38:14 authpriv warn pluto[9450]: "ACI1"[3] 63.250.111.205 #5: sending notification PAYLOAD_MALFORMED to 63.250.111.205:500
Nov 26 09:38:29 authpriv warn pluto[9450]: "ACI1"[3] 63.250.111.205 #5: Quick Mode message is unacceptable because it is for an incomplete ISAKMP SA
Nov 26 09:38:29 authpriv warn pluto[9450]: "ACI1"[3] 63.250.111.205 #5: sending notification PAYLOAD_MALFORMED to 63.250.111.205:500

Best Regards
Ozai
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openswan.org/pipermail/users/attachments/20131129/3e8694da/attachment.html>