Re: VPN ins OS X Server 10.9

LuKreme <kremels-/[email protected]> Tue, 4 Mar 2014 15:03:37 -0700
Newsgroups gmane.comp.macosx.admin
Message-ID <[email protected]>
On 04 Mar 2014, at 11:33 , Gilbert Wilson <[email protected]> wrote:

> So, if you=92re not seeing anything on the server side in /var/log/ppp/vp=
nd.log double-check system.log for messages from racoon and vpnd (although =
from the sound of what you=92ve described I=92d hazard the guess that you=
=92ll only see logs from racoon, if anything at all).

When I try to connect with the phone I get:

Mar  4 13:19:31 www.kreme.com racoon[224]: Connecting.
Mar  4 13:19:31 www.kreme.com racoon[224]: Invalid exchange type 243 from 2=
12.24.148.213[130].
Mar  4 13:19:31 www.kreme.com racoon[224]: IPSec Phase 1 started (Initiated=
 by peer).

(lots of stuff_

Mar  4 13:19:31 www.kreme.com racoon[224]: rejected hashtype: DB(prop#1:trn=
s#6):Peer(prop#1:trns#4) =3D MD5:SHA
Mar  4 13:19:31 www.kreme.com racoon[224]: rejected prf: DB(prop#1:trns#6):=
Peer(prop#1:trns#4) =3D MD5.0:0.0
Mar  4 13:19:31 www.kreme.com racoon[224]: no suitable proposal found.
Mar  4 13:19:31 www.kreme.com racoon[224]: failed to get valid proposal.
Mar  4 13:19:31 www.kreme.com racoon[224]: IKE Packet: receive failed. (Res=
ponder, Main-Mode Message 1).
Mar  4 13:19:31 www.kreme.com racoon[224]: failed to pre-process packet.
Mar  4 13:19:31 www.kreme.com racoon[224]: Phase 1 negotiation failed.

when the Macbook connects:

Mar  4 14:58:52 www.kreme.com racoon[224]: Connecting.
Mar  4 14:58:52 www.kreme.com racoon[224]: IPSec Phase 1 started (Initiated=
 by peer).
Mar  4 14:58:52 www.kreme.com racoon[224]: IKE Packet: receive success. (Re=
sponder, Main-Mode message 1).

(lots of stuff)

Mar  4 14:58:53 www.kreme.com racoon[224]: IKEv1 Phase 2 Responder: success=
. (Responder, Quick-Mode).
Mar  4 14:58:53 www.kreme.com racoon[224]: IPSec Phase 2 established (Initi=
ated by peer).
Mar  4 14:58:53 www.kreme.com racoon[224]: >>>>> phase change status =3D Ph=
ase 2 established


-- =

"Part of the inhumanity of the computer is that, once it is competently
programmed and working smoothly, it is completely honest." - Isaac
Asimov