From: Andreas Steffen (andreas.steffen_at_strongsec.net)
Date: Sat Jan 04 2003 - 20:28:46 CET
Clearly W2k has a problem. Please check the oakley.log for errors.
Regards
Andreas
Andrew Longstreet wrote:
> I have successfully configured SuSE 7.3 kernel 2.4.16 with FreeSWAN
> X.509 0.9.17.
>
> In a test lan, Road Warrior, W2K, no problems.
> Dial-up ras Road Warrior, W2K, no problems.
>
> Problems start when I try to connect a W2K Road Warrior, from behind a
> Linksys router to my FreeSWAN gate.
>
> Here is some info from the auth log.
> Jan 3 17:05:43 vpn1 pluto[1867]: packet from xxx.xxx.xxx.xxx:500:
> ignoring Vendor ID payload
> Jan 3 17:05:43 vpn1 pluto[1867]: "vpn"[2] XXX.XXX.XXX.XXX #2:
> responding to Main Mode from unknown peer xxx.xxx.xxx.xxx
> Jan 3 17:05:45 vpn1 pluto[1867]: "vpn"[2] XXX.XXX.XXX.XXX #2: Peer ID
> is ID_DER_ASN1_DN: 'C=CA, ST=Xxxx, L=Xxxx, O=XXX, CN=TEST USER,
> E=xxx_at_xxx.on.ca' <mailto:E=xxx_at_xxx.on.ca'>
> Jan 3 17:05:45 vpn1 pluto[1867]: "vpn"[2] XXX.XXX.XXX.XXX #2: sent MR3,
> ISAKMP SA established
> Jan 3 17:05:47 vpn1 pluto[1867]: "vpn"[2] XXX.XXX.XXX.XXX #2:
> retransmitting in response to duplicate packet; already STATE_MAIN_R3
> Jan 3 17:05:51 vpn1 pluto[1867]: "vpn"[2] XXX.XXX.XXX.XXX #2:
> retransmitting in response to duplicate packet; already STATE_MAIN_R3
> Jan 3 17:05:59 vpn1 pluto[1867]: "vpn"[2] XXX.XXX.XXX.XXX #2:
> discarding duplicate packet -- exhausted retransmission; already
> STATE_MAIN_R3
> Jan 3 17:06:15 vpn1 pluto[1867]: "vpn"[2] XXX.XXX.XXX.XXX #2:
> discarding duplicate packet -- exhausted retransmission; already
> STATE_MAIN_R3
> Jan 3 17:06:46 vpn1 pluto[1867]: "vpn"[2] XXX.XXX.XXX.XXX #2: next
> payload type of ISAKMP Hash Payload has an unknown value: 123
> Jan 3 17:06:46 vpn1 pluto[1867]: "vpn"[2] XXX.XXX.XXX.XXX #2: malformed
> payload in packet
>
> I continually get these errors.
>
> Any ideas ??
>
>
>
-- ====================================================================== Andreas Steffen e-mail: andreas.steffen_at_strongsec.com strongSec GmbH phone: +41 76 340 25 56 Alter Zürichweg 20 home: http://www.strongsec.com CH-8952 Schlieren (Switzerland) ==========================================[strong internet security]== _______________________________________________ Users mailing list Users_at_lists.freeswan.org http://lists.freeswan.org/mailman/listinfo/users
This archive was generated by hypermail 2.1.5 : Sun Jan 05 2003 - 05:21:07 CET