freeswan VPN

Administrator sysadmin at ice.si
Wed Oct 15 10:49:44 CEST 2003


Če hočem dvigniti connection med dvema VPN gatewayoma (oba Freeswan) mi zadeva obtiči.
 
prva mašina:
led:~# ipsec auto --verbose --up ice-premium
002 "ice-premium" #63: initiating Main Mode
104 "ice-premium" #63: STATE_MAIN_I1: initiate
106 "ice-premium" #63: STATE_MAIN_I2: sent MI2, expecting MR2
108 "ice-premium" #63: STATE_MAIN_I3: sent MI3, expecting MR3
002 "ice-premium" #63: Peer ID is ID_FQDN: '@vpnprem.premium.com.pl'
003 "ice-premium" #63: Signature check (on @vpnprem.premium.com.pl) failed (wrong key?)
217 "ice-premium" #63: STATE_MAIN_I3: INVALID_KEY_INFORMATION
010 "ice-premium" #63: STATE_MAIN_I3: retransmission; will wait 20s for response
002 "ice-premium" #63: Peer ID is ID_FQDN: '@vpnprem.premium.com.pl'
003 "ice-premium" #63: Signature check (on @vpnprem.premium.com.pl) failed (wrong key?)
217 "ice-premium" #63: STATE_MAIN_I3: INVALID_KEY_INFORMATION
010 "ice-premium" #63: STATE_MAIN_I3: retransmission; will wait 40s for response
002 "ice-premium" #63: Peer ID is ID_FQDN: '@vpnprem.premium.com.pl'
003 "ice-premium" #63: Signature check (on @vpnprem.premium.com.pl) failed (wrong key?)
217 "ice-premium" #63: STATE_MAIN_I3: INVALID_KEY_INFORMATION
031 "ice-premium" #63: max number of retransmissions (2) reached STATE_MAIN_I3.  Possible authentication failure: no acceptable response to our first encrypted message

 
druga mašina:
[root at vpnprem dalibor]# ipsec auto --verbose --up ice-premium
002 "ice-premium" #9: initiating Quick Mode RSASIG+ENCRYPT+TUNNEL+PFS
112 "ice-premium" #9: STATE_QUICK_I1: initiate
010 "ice-premium" #9: STATE_QUICK_I1: retransmission; will wait 20s for response
010 "ice-premium" #9: STATE_QUICK_I1: retransmission; will wait 40s for response
031 "ice-premium" #9: max number of retransmissions (2) reached STATE_QUICK_I1.  No acceptable response to our first Quick Mode message: perhaps peer likes no proposal

PS: Apeliram na Skoberneta, ker vem da je mojster za freeswan
 
Hvala!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://liste2.lugos.si/pipermail/lugos-list/attachments/20031015/4c08c7af/attachment-0001.htm


More information about the lugos-list mailing list