IPv6 readyNote: This archive passes through spamassassin. Every mail marked with the subject "*****SPAM*****" has exceed a certain threshold of spam-like behaviour.

[Users] FreeSwan with NetGear FVS 318

From: Romain Casagrande (rcasagrande_at_aurora-linux.com)
Date: Thu Jul 04 2002 - 15:52:03 CEST


hello all, i need some help.

Is anyone had yet configured any VPN connection between
a GNU/Linux-2.4.18/Debian-2.2/Freeswan-1.98 GW and a NetGear FVS 318 ?

Romain

My connection is based on a PSK Key, not a rsasig Key.

My conf :

config setup
        interfaces="ipsec0=eth1"
        klipsdebug=all
        plutodebug=none
        plutoload=%search
        plutostart=%search
        uniqueids=yes

conn %default
        keyingtries=0
        disablearrivalcheck=no
        authby=secret

conn TEST
        # type=tunnel
        # Left security gateway, subnet behind it, next hop toward right.
        # LEFT = HERE
        left=A.B.C.D
        leftsubnet=192.168.10.101/32
        leftnexthop=A.B.C.E
        leftid=GW_AURORA
        # Right security gateway, subnet behind it, next hop toward left.
        # RIGHT = THERE
        right=A.B.C.F
        rightid=ROUTER_JOUVE
        rightsubnet=10.10.254.1/32
        # To authorize this connection, but not actually start it, at startup,
        # uncomment this.
        auto=add

Results :

104 "TEST" #1: STATE_MAIN_I1: initiate
106 "TEST" #1: STATE_MAIN_I2: sent MI2, expecting MR2
108 "TEST" #1: STATE_MAIN_I3: sent MI3, expecting MR3
003 "TEST" #1: discarding duplicate packet; already STATE_MAIN_I3
010 "TEST" #1: STATE_MAIN_I3: retransmission; will wait 20s for
response
003 "TEST" #1: discarding duplicate packet; already STATE_MAIN_I3
010 "TEST" #1: STATE_MAIN_I3: retransmission; will wait 40s for
response
031 "TEST" #1: max number of retransmissions (2) reached
STATE_MAIN_I3. Possible authentication failure: no acceptable response
to our first encrypted message

Logs :
Local Site <----------> Remote Site
localip.500 ----> remoteip.500 udp 176
localip.500 <---- remoteip.500 udp 80
localip.500 ----> remoteip.500 udp 244
localip.500 <---- remoteip.500 udp 244
localip.500 ----> remoteip.500 udp 60
........long time.....
local.500 <---- remoteip.500 udp 244

at this place we should have an udp 60 return, not an 244 udp return any idea ?

Romain

_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users



This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:20:18 CEST