[Openswan Users] Openswan

Thu Aug 11 10:40:49 EDT 2016

Rescued from the Spam bucket.  Please remember to subscribe to the mailing list before posting to it.

From: Thodoris Tsatsos <thodoris.tsatsos at gmail.com>
Subject: Openswan
Date: August 11, 2016 at 6:52:33 AM EDT
To: users at lists.openswan.org

Hi All,

My tunnel keeps failing every few days and I dont know why.

I read that All indents in openswan should be a single tab not multiple spaces, multiple spaces can cause problems, so i changed it and still the same.

Here is the log file.

Aug 11 01:26:53 ip-10-185-1-13 pluto[20103]: "deveng-parkfarm-prod/1x4" #8329: max number of retransmissions (2) reached STATE_QUICK_I1.  No acceptable response to our first Quick Mode message: perhaps peer likes no proposal
Aug 11 01:26:53 ip-10-185-1-13 pluto[20103]: "deveng-parkfarm-prod/1x4" #8329: starting keying attempt 378 of an unlimited number
Aug 11 01:26:53 ip-10-185-1-13 pluto[20103]: "deveng-parkfarm-prod/1x4" #8345: initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW to replace #8329 {using isakmp#2080 msgid:933bed85 proposal=AES(12)_256-SHA1(2)_000 pfsgroup=OAKLEY_GROUP_MODP1024}
Aug 11 01:26:59 ip-10-185-1-13 pluto[20103]: "deveng-parkfarm-prod/1x6" #8331: max number of retransmissions (2) reached STATE_QUICK_I1.  No acceptable response to our first Quick Mode message: perhaps peer likes no proposal
Aug 11 01:26:59 ip-10-185-1-13 pluto[20103]: "deveng-parkfarm-prod/1x6" #8331: starting keying attempt 381 of an unlimited number
Aug 11 01:26:59 ip-10-185-1-13 pluto[20103]: "deveng-parkfarm-prod/1x6" #8347: initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW to replace #8331 {using isakmp#2080 msgid:591bdec5 proposal=AES(12)_256-SHA1(2)_000 pfsgroup=OAKLEY_GROUP_MODP1024}
Aug 11 01:27:03 ip-10-185-1-13 pluto[20103]: "deveng-parkfarm-prod/1x5" #8332: max number of retransmissions (2) reached STATE_QUICK_I1.  No acceptable response to our first Quick Mode message: perhaps peer likes no proposal
Aug 11 01:27:03 ip-10-185-1-13 pluto[20103]: "deveng-parkfarm-prod/1x5" #8332: starting keying attempt 398 of an unlimited number
Aug 11 01:27:03 ip-10-185-1-13 pluto[20103]: "deveng-parkfarm-prod/1x5" #8348: initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW to replace #8332 {using isakmp#2080 msgid:1a257190 proposal=AES(12)_256-SHA1(2)_000 pfsgroup=OAKLEY_GROUP_MODP1024}
Aug 11 01:27:13 ip-10-185-1-13 pluto[24733]: added connection description "deveng-parkfarm-prod/1x1"
Aug 11 01:27:13 ip-10-185-1-13 pluto[24733]: added connection description "deveng-parkfarm-prod/1x2"
Aug 11 01:27:13 ip-10-185-1-13 pluto[24733]: added connection description "deveng-parkfarm-prod/1x3"
Aug 11 01:27:13 ip-10-185-1-13 pluto[24733]: added connection description "deveng-parkfarm-prod/1x4"
Aug 11 01:27:13 ip-10-185-1-13 pluto[24733]: added connection description "deveng-parkfarm-prod/1x5"
Aug 11 01:27:13 ip-10-185-1-13 pluto[24733]: added connection description "deveng-parkfarm-prod/1x6"
Aug 11 01:27:13 ip-10-185-1-13 pluto[24733]: added connection description "deveng-parkfarm-prod/1x7"
Aug 11 01:27:13 ip-10-185-1-13 pluto[24733]: added connection description "deveng-parkfarm-prod/1x8"
Aug 11 01:27:13 ip-10-185-1-13 pluto[24733]: added connection description "deveng-parkfarm-prod/1x9"
Aug 11 01:27:53 ip-10-185-1-13 pluto[24733]: "deveng-parkfarm-prod/1x9" #182: max number of retransmissions (2) reached STATE_QUICK_I1.  No acceptable response to our first Quick Mode message: perhaps peer likes no proposal
Aug 11 01:27:53 ip-10-185-1-13 pluto[24733]: "deveng-parkfarm-prod/1x9" #182: starting keying attempt 2 of an unlimited number
Aug 11 01:27:53 ip-10-185-1-13 pluto[24733]: "deveng-parkfarm-prod/1x9" #188: initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW to replace #182 {using isakmp#4 msgid:355a88ab proposal=AES(12)_256-SHA1(2)_000 pfsgroup=OAKLEY_GROUP_MODP1024}
Aug 11 01:27:53 ip-10-185-1-13 pluto[24733]: "deveng-parkfarm-prod/1x8" #181: max number of retransmissions (2) reached STATE_QUICK_I1.  No acceptable response to our first Quick Mode message: perhaps peer likes no proposal
Aug 11 01:27:53 ip-10-185-1-13 pluto[24733]: "deveng-parkfarm-prod/1x8" #181: starting keying attempt 2 of an unlimited number
Aug 11 01:27:53 ip-10-185-1-13 pluto[24733]: "deveng-parkfarm-prod/1x8" #189: initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW to replace #181 {using isakmp#4 msgid:63222913 proposal=AES(12)_256-SHA1(2)_000 pfsgroup=OAKLEY_GROUP_MODP1024}
Aug 11 01:27:53 ip-10-185-1-13 pluto[24733]: "deveng-parkfarm-prod/1x7" #180: max number of retransmissions (2) reached STATE_QUICK_I1.  No acceptable response to our first Quick Mode message: perhaps peer likes no proposal
Aug 11 01:27:53 ip-10-185-1-13 pluto[24733]: "deveng-parkfarm-prod/1x7" #180: starting keying attempt 2 of an unlimited number
Aug 11 01:27:53 ip-10-185-1-13 pluto[24733]: "deveng-parkfarm-prod/1x7" #190: initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW to replace #180 {using isakmp#4 msgid:4899ff41 proposal=AES(12)_256-SHA1(2)_000 pfsgroup=OAKLEY_GROUP_MODP1024}
Aug 11 01:27:53 ip-10-185-1-13 pluto[24733]: "deveng-parkfarm-prod/1x6" #179: max number of retransmissions (2) reached STATE_QUICK_I1.  No acceptable response to our first Quick Mode message: perhaps peer likes no proposal
Aug 11 01:27:53 ip-10-185-1-13 pluto[24733]: "deveng-parkfarm-prod/1x6" #179: starting keying attempt 2 of an unlimited number
Aug 11 01:27:53 ip-10-185-1-13 pluto[24733]: "deveng-parkfarm-prod/1x6" #191: initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW to replace #179 {using isakmp#4 msgid:8db1312f proposal=AES(12)_256-SHA1(2)_000 pfsgroup=OAKLEY_GROUP_MODP1024}
Aug 11 01:27:53 ip-10-185-1-13 pluto[24733]: "deveng-parkfarm-prod/1x5" #178: max number of retransmissions (2) reached STATE_QUICK_I1.  No acceptable response to our first Quick Mode message: perhaps peer likes no proposal
Aug 11 01:27:53 ip-10-185-1-13 pluto[24733]: "deveng-parkfarm-prod/1x5" #178: starting keying attempt 2 of an unlimited number
Aug 11 01:27:53 ip-10-185-1-13 pluto[24733]: "deveng-parkfarm-prod/1x5" #192: initiating Quick Mode PSK+ENCRYPT+TUNNEL+PFS+UP+IKEV2_ALLOW+SAREF_TRACK+IKE_FRAG_ALLOW to replace #178 {using isakmp#4 msgid:b06efd7b proposal=AES(12)_256-SHA1(2)_000 pfsgroup=OAKLEY_GROUP_MODP1

Any suggestions?

Thank you in advance.

Best regards,
Theo

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openswan.org/pipermail/users/attachments/20160811/00549681/attachment-0001.html>