[Openswan Users] [OPENSWAN] AMAZON - INVALID_INFORMATION_ID

kwaye kant gabrielkwaye at gmail.com
Tue Jan 12 04:06:02 EST 2016


​Hello all,

My server is running on Amazon​ EC2 with
IP address 52.124.24.106
Private IP 172.XX.XX.XX

My remote server
IP:41.XX.XX.XX
Subnet: 41.XX.XX.XX/30

This is my ipsec configuration
        *authby=secret*
*        type=tunnel*
*        pfs=no*
*        forceencaps=yes*
*        ike=3des-sha1;modp1024*
*        keyexchange=ike*
*        phase2=esp*
*        phase2alg=aes256-sha1;modp1024*
*        ikelifetime=28800s*
*        left=%defaultroute*
*        leftid=52.124.24.106*
*        auto=start*
*        leftprotoport=17/1701*
*        right=41.XX.XX.XX*
*        rightid=41.XX.XX.XX*
*        rightprotoport=17/1701*
*        rightsubnet=41.XX.XX.XX/30*

But when I tried to connect to the remote I am getting this error
*031 "vpn" #233: max number of retransmissions (2) reached STATE_QUICK_I1.
No acceptable response to our first Quick Mode message: s peer likes no
proposal*
*000 "vpn" #233: starting keying attempt 2 of an unlimited number, but
releasing whack*

On the remote I have this error
**5.1843774730 MVAS_RK1_FW1 IKE/7/DEBUG:Get IPsec policy: get IPsec policy
failed*
**5.1843774730 MVAS_RK1_FW1 IKE/7/DEBUG:validate_prop: no IPsec policy
found*
**5.1843774730 MVAS_RK1_FW1 IKE/7/DEBUG:dropped message
from 52.124.24.106 due to notification type INVALID_ID_INFORMATION*

I have already check my IPsec config and IKE Policy and I can't fix this.
Did somebody already face this before ?
-- 





*------------------------------------------------------------------------------------------------------------------------------------------------Kwaye
KantSkype: g.kwaye(00) 237 677315145Douala - Cameroon*
*www.ksoft-solutions.com <http://www.ksoft-solutions.com>*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openswan.org/pipermail/users/attachments/20160112/4d166fb3/attachment.html>


More information about the Users mailing list