Hieronder een stuk uit mijn racoon (ike manager) logfile,
ik heb het geheel volgens deze link opgezet
http://www.fatcanary.com.au/docs/xp_freebsd_cert_ipsec.txt
Het werkt nie & I don't get it, dit is frustrerend
tips en truks of een oplossing zijn erg welkom.
ik heb het geheel volgens deze link opgezet
http://www.fatcanary.com.au/docs/xp_freebsd_cert_ipsec.txt
Het werkt nie & I don't get it, dit is frustrerend
tips en truks of een oplossing zijn erg welkom.
code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
| 2002-05-15 12:38:42: INFO: isakmp.c:896:isakmp_ph1begin_r(): begin Identity Protection mode. 2002-05-15 12:38:42: INFO: vendorid.c:128:check_vendorid(): received Vendor ID: MS NT5 ISAKMPOAKLEY 2002-05-15 12:38:42: ERROR: ipsec_doi.c:428:print_ph1mismatched(): rejected hashtype: DB(prop#1:trns#1):Peer(prop#1:trns#1) = MD5:SHA 2002-05-15 12:38:42: ERROR: ipsec_doi.c:440:print_ph1mismatched(): rejected dh_group: DB(prop#1:trns#1):Peer(prop#1:trns#1) = 768-bit MODP group:1024-bit MODP group 2002-05-15 12:38:42: ERROR: ipsec_doi.c:440:print_ph1mismatched(): rejected dh_group: DB(prop#1:trns#1):Peer(prop#1:trns#2) = 768-bit MODP group:1024-bit MODP group 2002-05-15 12:38:42: ERROR: ipsec_doi.c:404:print_ph1mismatched(): rejected enctype: DB(prop#1:trns#1):Peer(prop#1:trns#3) = 3DES-CBC:DES-CBC 2002-05-15 12:38:42: ERROR: ipsec_doi.c:428:print_ph1mismatched(): rejected hashtype: DB(prop#1:trns#1):Peer(prop#1:trns#3) = MD5:SHA 2002-05-15 12:38:42: ERROR: ipsec_doi.c:404:print_ph1mismatched(): rejected enctype: DB(prop#1:trns#1):Peer(prop#1:trns#4) = 3DES-CBC:DES-CBC 2002-05-15 12:38:42: ERROR: ipsec_doi.c:243:get_ph1approval(): no suitable proposal found. 2002-05-15 12:38:42: ERROR: isakmp_ident.c:782:ident_r1recv(): failed to get valid proposal. 2002-05-15 12:38:42: ERROR: isakmp.c:910:isakmp_ph1begin_r(): failed to process packet. 2002-05-15 12:38:58: INFO: isakmp.c:891:isakmp_ph1begin_r(): respond new phase 1 negotiation: 172.16.0.20[500]<=>10.50.0.20[500] 2002-05-15 12:38:58: INFO: isakmp.c:896:isakmp_ph1begin_r(): begin Identity Protection mode. 2002-05-15 12:38:58: INFO: vendorid.c:128:check_vendorid(): received Vendor ID: MS NT5 ISAKMPOAKLEY 2002-05-15 12:38:58: ERROR: ipsec_doi.c:428:print_ph1mismatched(): rejected hashtype: DB(prop#1:trns#1):Peer(prop#1:trns#1) = MD5:SHA 2002-05-15 12:38:58: ERROR: ipsec_doi.c:440:print_ph1mismatched(): rejected dh_group: DB(prop#1:trns#1):Peer(prop#1:trns#1) = 768-bit MODP group:1024-bit MODP group 2002-05-15 12:38:58: ERROR: ipsec_doi.c:440:print_ph1mismatched(): rejected dh_group: DB(prop#1:trns#1):Peer(prop#1:trns#2) = 768-bit MODP group:1024-bit MODP group 2002-05-15 12:38:58: ERROR: ipsec_doi.c:404:print_ph1mismatched(): rejected enctype: DB(prop#1:trns#1):Peer(prop#1:trns#3) = 3DES-CBC:DES-CBC 2002-05-15 12:38:58: ERROR: ipsec_doi.c:428:print_ph1mismatched(): rejected hashtype: DB(prop#1:trns#1):Peer(prop#1:trns#3) = MD5:SHA 2002-05-15 12:38:58: ERROR: ipsec_doi.c:404:print_ph1mismatched(): rejected enctype: DB(prop#1:trns#1):Peer(prop#1:trns#4) = 3DES-CBC:DES-CBC 2002-05-15 12:38:58: ERROR: ipsec_doi.c:243:get_ph1approval(): no suitable proposal found. 2002-05-15 12:38:58: ERROR: isakmp_ident.c:782:ident_r1recv(): failed to get valid proposal. 2002-05-15 12:38:58: ERROR: isakmp.c:910:isakmp_ph1begin_r(): failed to process packet. 2002-05-15 12:39:26: ERROR: isakmp.c:463:isakmp_main(): unknown Informational exchange received. 2002-05-15 12:42:38: INFO: isakmp.c:1681:isakmp_post_acquire(): IPsec-SA request for 10.50.0.20 queued due to no phase1 found. 2002-05-15 12:42:38: INFO: isakmp.c:795:isakmp_ph1begin_i(): initiate new phase 1 negotiation: 172.16.0.20[500]<=>10.50.0.20[500] 2002-05-15 12:42:38: INFO: isakmp.c:800:isakmp_ph1begin_i(): begin Identity Protection mode. 2002-05-15 12:42:38: ERROR: isakmp_inf.c:776:isakmp_info_recv_n(): unknown notify message, no phase2 handle found. 2002-05-15 12:43:40: ERROR: isakmp.c:1773:isakmp_chkph1there(): phase2 negotiation failed due to time up waiting for phase1. ESP 10.50.0.20->172.16.0.20 2002-05-15 12:43:40: INFO: isakmp.c:1778:isakmp_chkph1there(): delete phase 2 handler. |