Toon posts:

VPN foutmelding (HELP)

Pagina: 1
Acties:

Verwijderd

Topicstarter
Hieronder een stuk uit mijn racoon (ike manager) logfile,
ik heb het geheel volgens deze link opgezet
http://www.fatcanary.com.au/docs/xp_freebsd_cert_ipsec.txt

Het werkt nie & I don't get it, dit is frustrerend
tips en truks of een oplossing zijn erg welkom.
code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
2002-05-15 12:38:42: INFO: isakmp.c:896:isakmp_ph1begin_r(): begin Identity Protection mode.
2002-05-15 12:38:42: INFO: vendorid.c:128:check_vendorid(): received Vendor ID: MS NT5 ISAKMPOAKLEY
2002-05-15 12:38:42: ERROR: ipsec_doi.c:428:print_ph1mismatched(): rejected hashtype: DB(prop#1:trns#1):Peer(prop#1:trns#1) = MD5:SHA
2002-05-15 12:38:42: ERROR: ipsec_doi.c:440:print_ph1mismatched(): rejected dh_group: DB(prop#1:trns#1):Peer(prop#1:trns#1) = 768-bit MODP group:1024-bit MODP group
2002-05-15 12:38:42: ERROR: ipsec_doi.c:440:print_ph1mismatched(): rejected dh_group: DB(prop#1:trns#1):Peer(prop#1:trns#2) = 768-bit MODP group:1024-bit MODP group
2002-05-15 12:38:42: ERROR: ipsec_doi.c:404:print_ph1mismatched(): rejected enctype: DB(prop#1:trns#1):Peer(prop#1:trns#3) = 3DES-CBC:DES-CBC
2002-05-15 12:38:42: ERROR: ipsec_doi.c:428:print_ph1mismatched(): rejected hashtype: DB(prop#1:trns#1):Peer(prop#1:trns#3) = MD5:SHA
2002-05-15 12:38:42: ERROR: ipsec_doi.c:404:print_ph1mismatched(): rejected enctype: DB(prop#1:trns#1):Peer(prop#1:trns#4) = 3DES-CBC:DES-CBC
2002-05-15 12:38:42: ERROR: ipsec_doi.c:243:get_ph1approval(): no suitable proposal found.
2002-05-15 12:38:42: ERROR: isakmp_ident.c:782:ident_r1recv(): failed to get valid proposal.
2002-05-15 12:38:42: ERROR: isakmp.c:910:isakmp_ph1begin_r(): failed to process packet.
2002-05-15 12:38:58: INFO: isakmp.c:891:isakmp_ph1begin_r(): respond new phase 1 negotiation: 172.16.0.20[500]<=>10.50.0.20[500]
2002-05-15 12:38:58: INFO: isakmp.c:896:isakmp_ph1begin_r(): begin Identity Protection mode.
2002-05-15 12:38:58: INFO: vendorid.c:128:check_vendorid(): received Vendor ID: MS NT5 ISAKMPOAKLEY
2002-05-15 12:38:58: ERROR: ipsec_doi.c:428:print_ph1mismatched(): rejected hashtype: DB(prop#1:trns#1):Peer(prop#1:trns#1) = MD5:SHA
2002-05-15 12:38:58: ERROR: ipsec_doi.c:440:print_ph1mismatched(): rejected dh_group: DB(prop#1:trns#1):Peer(prop#1:trns#1) = 768-bit MODP group:1024-bit MODP group
2002-05-15 12:38:58: ERROR: ipsec_doi.c:440:print_ph1mismatched(): rejected dh_group: DB(prop#1:trns#1):Peer(prop#1:trns#2) = 768-bit MODP group:1024-bit MODP group
2002-05-15 12:38:58: ERROR: ipsec_doi.c:404:print_ph1mismatched(): rejected enctype: DB(prop#1:trns#1):Peer(prop#1:trns#3) = 3DES-CBC:DES-CBC
2002-05-15 12:38:58: ERROR: ipsec_doi.c:428:print_ph1mismatched(): rejected hashtype: DB(prop#1:trns#1):Peer(prop#1:trns#3) = MD5:SHA
2002-05-15 12:38:58: ERROR: ipsec_doi.c:404:print_ph1mismatched(): rejected enctype: DB(prop#1:trns#1):Peer(prop#1:trns#4) = 3DES-CBC:DES-CBC
2002-05-15 12:38:58: ERROR: ipsec_doi.c:243:get_ph1approval(): no suitable proposal found.
2002-05-15 12:38:58: ERROR: isakmp_ident.c:782:ident_r1recv(): failed to get valid proposal.
2002-05-15 12:38:58: ERROR: isakmp.c:910:isakmp_ph1begin_r(): failed to process packet.
2002-05-15 12:39:26: ERROR: isakmp.c:463:isakmp_main(): unknown Informational exchange received.
2002-05-15 12:42:38: INFO: isakmp.c:1681:isakmp_post_acquire(): IPsec-SA request for 10.50.0.20 queued due to no phase1 found.
2002-05-15 12:42:38: INFO: isakmp.c:795:isakmp_ph1begin_i(): initiate new phase 1 negotiation: 172.16.0.20[500]<=>10.50.0.20[500]
2002-05-15 12:42:38: INFO: isakmp.c:800:isakmp_ph1begin_i(): begin Identity Protection mode.
2002-05-15 12:42:38: ERROR: isakmp_inf.c:776:isakmp_info_recv_n(): unknown notify message, no phase2 handle found.
2002-05-15 12:43:40: ERROR: isakmp.c:1773:isakmp_chkph1there(): phase2 negotiation failed due to time up waiting for phase1. ESP 10.50.0.20->172.16.0.20 
2002-05-15 12:43:40: INFO: isakmp.c:1778:isakmp_chkph1there(): delete phase 2 handler.

Verwijderd

Topicstarter
BOOT

  • Liegebeest
  • Registratie: Februari 2002
  • Laatst online: 19:10
Is dit wat?

http://www.atm.tut.fi/list-archive/snap-users/msg01056.html
en het antwoord daar op
http://www.atm.tut.fi/list-archive/snap-users/msg01057.html

Niet dat ik Racoon ken, maar dit kon ik zo gauw met Google vinden :) De andere twee resultaten waren in het japans :p

Liege, liege, liegebeest!


Verwijderd

Topicstarter
Dit is het vervelende stukje,
code:
1
2
failed to get valid proposal
rejected enctype

XP en BSD zouden.. moet.. kunnen.. communiceren,,,, maar wat gaat er fout. Ik begin (gisteren dus) goed te twijfelen aan die m$ meuk. Racoon doet wat i zou moeten doen zo ik de logfile kan ontcijferen, xp heeft niet dat gebruikersgemak.