L2TP & IPSec problems [SOLVED]

expat · Tue Jan 17, 2006 8:33 pm

Am trying to allow road warriors to connect via L2TP VPN. I have created a test PPP account, the IKE peer, set the rules on input, but keep getting the following messages in the log when attempting a connection:

18:24:06 ipsec,ike,info IPSEC:: responding phase 1, starting mode Identity Protection (local 
    172.16.99.41:500) (remote172.16.98.142:500) 
18:24:06 ipsec,ike,info no acceptable proposal found (remote unknown) 
18:24:06 ipsec,ike,info IKE:: no acceptable proposal found (remote unknown) 
18:24:06 ipsec,ike,info IPSEC:: no acceptable proposal found (remote unknown) 
18:24:06 ipsec,ike,info failed to process packet 
18:24:06 ipsec,ike,info IKE:: failed to process packet 
18:24:06 ipsec,ike,info IPSEC:: failed to process packet 
18:24:08 ipsec,ike,info received ISAKMP packet from 172.16.98.142:500, phase 1, Identity Protection 
18:24:08 ipsec,ike,info IKE:: received ISAKMP packet from 172.16.98.142:500, phase 1, Identity Protection 
18:24:08 ipsec,ike,info IPSEC:: received ISAKMP packet from 172.16.98.142:500, phase 1, Identity 
    Protection 
18:24:08 ipsec,ike,info responding phase 1, starting mode Identity Protection (local 172.16.99.41:500) 
    (remote172.16.98.142:500) 
18:24:08 ipsec,ike,info IKE:: responding phase 1, starting mode Identity Protection (local 
    172.16.99.41:500) (remote172.16.98.142:500) 
18:24:08 ipsec,ike,info IPSEC:: responding phase 1, starting mode Identity Protection (local 
    172.16.99.41:500) (remote172.16.98.142:500) 
18:24:08 ipsec,ike,info no acceptable proposal found (remote unknown) 
18:24:08 ipsec,ike,info IKE:: no acceptable proposal found (remote unknown) 
18:24:08 ipsec,ike,info IPSEC:: no acceptable proposal found (remote unknown) 
18:24:08 ipsec,ike,info failed to process packet 
18:24:08 ipsec,ike,info IKE:: failed to process packet 
18:24:08 ipsec,ike,info IPSEC:: failed to process packet 
18:24:11 ipsec,ike,info received ISAKMP packet from 172.16.98.142:500, phase 2, Informational 
18:24:11 ipsec,ike,info IKE:: received ISAKMP packet from 172.16.98.142:500, phase 2, Informational 
18:24:11 ipsec,ike,info IPSEC:: received ISAKMP packet from 172.16.98.142:500, phase 2, Informational 
18:24:11 ipsec,ike,info unexpected Informational exchange (remote unknown) 
18:24:11 ipsec,ike,info IKE:: unexpected Informational exchange (remote unknown) 
18:24:11 ipsec,ike,info IPSEC:: unexpected Informational exchange (remote unknown)

...and the connection fails.

I have created an entry in the IPSec peers with just generate policy:

address=0.0.0.0/32:500 secret="xyz123" generate-policy=yes exchange-mode=main send-initial-contact=yes 
     proposal-check=obey hash-algorithm=md5 enc-algorithm=3des dh-group=modp1024 lifetime=1d lifebytes=0

Any pointers on what I seem to be missing in this?

TIA.

andrewluck · Sun Jan 22, 2006 12:19 am

Address should be:

0.0.0.0/0:500 and not 0.0.0.0/32

Regards

Andrew

expat · Mon Jan 23, 2006 6:16 pm

Working.

Thanks.

L2TP & IPSec problems [SOLVED]

L2TP & IPSec problems [SOLVED]

Who is online