-----BEGIN PGP SIGNED MESSAGE-----

On Sun, Jun 16, 2002 at 09:12:40PM +0200, Narancs v1 wrote:
> Hi all!!!
> 
> linux 2.4.18, freeswan 1.96, debian 3.0
> (freeswan_1.96-1.2_i386.deb)
> 
> no iptables rules applied, accept-accept
> 
> config setup
>         interfaces="ipsec0=eth0:0 ipsec1=eth1:0 "
>         klipsdebug=none
>         plutodebug=all
>         plutoload=%search
>         plutostart=%search
>         uniqueids=yes
> conn %default
>         keyingtries=2
>         disablearrivalcheck=no
>         authby=rsasig
>         leftrsasigkey=%dns
>         rightrsasigkey=%dns
> conn anitaeliza-einstein
>         left=1.0.0.1
>         leftnexthop=1.0.0.2
>         right=2.0.0.1
>         rightnexthop=2.0.0.2
>         type=tunnel
>         authby=secret
>         keyexchange=ike
>         ikelifetime=480m
>         auth=esp
>         esp=3des-md5-96
>         keylife=480m
>         pfs=yes (or no, it's the same)
>         rekeymargin=9m
>         rekeyfuzz=45%
>         auto=start
> 
> 
> log:
> 
> ipsec__plutorun: 031 "left-right" #5: max number of retransmissions (2) reached STATE_MAIN_I1.  No acceptable response to our first IKE message
> ipsec__plutorun: 000 "left-right" #5: starting keying attempt 2 of at most 2, but releasing whack
> ipsec__plutorun: ...could not start conn  "left-right"
Please try:
  - ipsec whack --debug-all at RESPONDER side, and dig in the logs
    for possible causes.
    
  - because you are using my ALGO patches, please try to reproduce
    this behaviour without them, it's ok to JUST put an unpatched
    pluto and whack (patched KLIPS can stay, of course it won't use
    new ESP algo modules).
    
Regards

- -- 
- --Juanjo       freeswan algo: AES (+others), SHA2, MODP2048-4096 
               selectable algorithms support for Phase1 and 2.

#  Juan Jose Ciarlante (JuanJo PGP) jjo ;at; mendoza.gov.ar              #
#  Key fingerprint = 76 60 A5 76 FD D2 53 E3  50 C7 90 20 22 8C F1 2D    #
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iQCVAwUBPRIosPiRsh5Aa5C9AQH5rgQAgNSH8xC2N7JR6QNnPkN8S0nfpjb+/cZt
TtsuYOn+aZab+bqjFxQUT5M8t/+JoXzDjuJ+RcYYVa6SB1JMyrbxPL3O8w3/dETg
7MPIn3xv88XlT4P8ZfZzTrlCHhznIF58ak5NfVKgIyLsG3qjsvkQiCu2c585GdRL
3agB7vNJj3k=
=DzKV
-----END PGP SIGNATURE-----
_______________________________________________
Users mailing list
Users@lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users