[Openswan Users] Openswan and Cisco ASA

Ivan Adji - Krstev akivanradix at gmail.com
Thu Nov 13 04:13:13 EST 2014


I have configured IPSec tunnels with Openswan and Cisco ASA, i have
established a connection and the ping was fine, but after some time there
is request time out from both sites. I don't have ASA access but its
default IPSec configuration,this is the openswan conf parameters.

#Define your IKE policy
        authby=secret
        keyingtries=0
        pfs=no
        ike=3des-sha1;modp1024
        ikelifetime="28800"

        dpddelay=0
        dpdtimeout=0
        dpdaction=clear

#Define IPSec Policy

        phase2=esp
        phase2alg=3des-sha1
        ikev2=no
        keyexchange=ike
        rekey=no
        forceencaps=no
        keylife="28800"

I have found this in the "/var/log/seccure" logs

received Delete SA(0x937bbc29) payload: deleting IPSEC State #5
received and ignored informational message
received Delete SA(0x55f62168) payload: deleting IPSEC State #8
received and ignored informational message

Also i like to put some more logging/debuging so i can have more info but
can't find any good example or doc. on how to.

And i have the following doc. on Phase 1 and 2

Encryption Algorithm     3DES
Hash Algorithm           SHA1
Authentication method    Preshare
Diffie Hellman Group     Group 2
Lifetime (Key)           28800
Use NAT traversal        No
Use PFS                  No
Encapsulation            ESP
Encryption Algorithm     3DES
Hash Algorithm           SHA1
Lifetime (Key)           28800

Any solution or hints or some parameters that I'm missing ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openswan.org/pipermail/users/attachments/20141113/9b55d512/attachment.html>


More information about the Users mailing list