Lennon,
it would help if you could post the IPSec configuration from both firewalls
and the debug from both firewalls.
Anyway, it seems like you have mismatch in the transform-set. Verify that
the used transform-sets on both sides match.
HTH
Regards,
/Palm
[email protected]
2003-10-07 02:27
Till: [email protected] @ INTERNET
Kopia: (Blank: Hakan Palm/Generic)
Ärende: [VPN] Help - Problem VPN Cisco Pix 515E
Dear friends,
I have a problem, I am trying to establish a tunnel with
other company that possesses a firewall same to mine - Cisco
Pix 515, but I don't get, the presented message is the
following:
crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
OAK_QM exchange
oakley_process_quick_mode:
OAK_QM_IDLE
ISAKMP (0): processing SA payload. message ID = 3011867608
ISAKMP : Checking IPSec proposal 1
ISAKMP: transform 1, ESP_3DES
ISAKMP: attributes in transform:
ISAKMP: encaps is 1
ISAKMP: SA life type in seconds
ISAKMP: SA life duration (basic) of 28800
ISAKMP: SA life type in kilobytes
ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
ISAKMP: authenticator is HMAC-MD5
ISAKMP: group is 2
ISAKMP (0): atts not acceptable. Next payload is 0
ISAKMP (0): SA not acceptable!
ISAKMP (0): sending NOTIFY message 14 protocol 0
return status is IKMP_ERR_NO_RETRANS**
crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
ISAKMP (0:0): phase 2 packet is a duplicate of a previous
packet.
crypto_isakmp_process_block: x.x.x.2, dest x.x.x.131
ISAKMP (0:0): phase 2 packet is a duplicate of a previous
packet.
crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
ISAKMP (0:0): phase 2 packet is a duplicate of a previous
packet.
crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
ISAKMP (0:0): phase 2 packet is a duplicate of a previous
packet.
crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
VPN Peer: ISAKMP: Peer ip:200.182.223.2 Ref cnt incremented
to:2 Total VPN Peers
:2
OAK_MM exchange
ISAKMP (0): processing SA payload. message ID = 0
ISAKMP (0): Checking ISAKMP transform 1 against priority 1
policy
ISAKMP: encryption 3DES-CBC
ISAKMP: hash MD5
ISAKMP: default group 2
ISAKMP: auth pre-share
ISAKMP: life type in seconds
ISAKMP: life duration (basic) of 7200
ISAKMP (0): atts are acceptable. Next payload is 3
ISAKMP (0): SA is doing pre-shared key authentication using
id type ID_IPV4_ADDR
return status is IKMP_NO_ERROR
crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
OAK_MM exchange
ISAKMP (0): processing KE payload. message ID = 0
ISAKMP (0): processing NONCE payload. message ID = 0
ISAKMP (0): processing vendor id payload
ISAKMP (0): processing vendor id payload
ISAKMP (0): remote peer supports dead peer detection
ISAKMP (0): processing vendor id payload
ISAKMP (0): speaking to another IOS box!
return status is IKMP_NO_ERROR
crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
OAK_MM exchange
ISAKMP (0): processing ID payload. message ID = 0
ISAKMP (0): processing HASH payload. message ID = 0
ISAKMP (0): SA has been authenticated
ISAKMP (0): ID payload
next-payload : 8
type : 1
protocol : 17
port : 500
length : 8
ISAKMP (0): Total payload length: 12
return status is IKMP_NO_ERROR
crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
OAK_QM exchange
oakley_process_quick_mode:
OAK_QM_IDLE
ISAKMP (0): processing SA payload. message ID = 1458594770
ISAKMP : Checking IPSec proposal 1
ISAKMP: transform 1, ESP_3DES
ISAKMP: attributes in transform:
ISAKMP: encaps is 1
ISAKMP: SA life type in seconds
ISAKMP: SA life duration (basic) of 28800
ISAKMP: SA life type in kilobytes
ISAKMP: SA life duration (VPI) of 0x0 0x46 0x50 0x0
ISAKMP: authenticator is HMAC-MD5
ISAKMP: group is 2
ISAKMP (0): atts not acceptable. Next payload is 0
ISAKMP (0): SA not acceptable!
ISAKMP (0): sending NOTIFY message 14 protocol 0
return status is IKMP_ERR_NO_RETRANS
crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
ISAKMP (0): processing DELETE payload. message ID = 3302399666
ISAKMP (0): deleting SA: src x.x.x.2, dst x.x.x.131
return status is IKMP_NO_ERR_NO_TRANS
crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
ISAKMP (0): processing NOTIFY payload 24578 protocol 1
spi 0, message ID = 1981775628
ISAKMP (0): processing notify INITIAL_CONTACT
return status is IKMP_NO_ERR_NO_TRANS
ISADB: reaper checking SA 0x8161af60, conn_id = 0
ISADB: reaper checking SA 0x81530c78, conn_id = 0 DELETE IT!
VPN Peer: ISAKMP: Peer ip:x.x.x.2 Ref cnt decremented to:1
Total VPN Peers
:2
ISADB: reaper checking SA 0x8161af60, conn_id = 0
ISADB: reaper checking SA 0x81617f48, conn_id = 0
crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
ISAKMP (0:0): phase 2 packet is a duplicate of a previous
packet.
crypto_isakmp_process_block: src x.x.x.2, dest x.x.x.131
OAK_QM exchange
oakley_process_quick_mode:
OAK_QM_IDLE
ISAKMP (0): processing SA payload. message ID = 933563993
Please, does anybody know him what this can be?
Thanks
Lennon
---
Acabe com aquelas janelinhas que pulam na sua tela.
AntiPop-up UOL - É grátis!
http://antipopup.uol.com.br
_______________________________________________
VPN mailing list
[email protected]
http://lists.shmoo.com/mailman/listinfo/vpn
lmpx.com only provides a reader for public news (NNTP) servers. It is not
affiliated with the servers or forums shown here and is not responsible for
the content of articles, which is written by their respective authors.