Re: Problem VPN Netscreen x Raptor - INVALID_ID_INFO
[email protected] Wed, 22 Sep 2004 15:42:45 +0200
| Newsgroups | gmane.comp.security.vpn |
|---|---|
| Message-ID | <OF0278AFDB.F077E7F2-ONC1256F17.004AC0BF-C1256F17.004BFE1E@lngov.gov.si> |
It seems to me you have Phase 2 problem (IPsec), buti could not figure what out of the attached log. I can help around Netscreen with few basics: you have to type: set console dbuf /to redirect console/ * then you have to select a debug level* debug ike all /example/ *or* debug flow basic /less detail/ clear dbuf /to clear buffers/ *try your connection* get db stream / to show debug stream/ Regards, AB -------------------------------------------------------------------- mag. Aleksander Boh, državni podsekretar Center Vlade za informatiko RS Langusova 4 Ljubljana +386 1 4788600 |---------+-------------------------------------------------> | | Jean-Francois Dive <[email protected]> | | | Pošiljatelj: | | | vpn-bounces+aleksander.boh=gov.si@list| | | s.shmoo.com | | | | | | | | | 22.09.2004 06:47 | | | | |---------+-------------------------------------------------> >-----------------------------------------------------------------------------------------------------------------------------| | | | Za: Jaime Elias da Cunha Junior <[email protected]> | | kp: [email protected] | | Zadeva: Re: [VPN] Problem VPN Netscreen x Raptor - INVALID_ID_INFO | >-----------------------------------------------------------------------------------------------------------------------------| the networks/route/sp exchanged do not match. Check that you have the same values on both side (from xx.xx.xx.xx/yy to zz.zz.zz.zz/ww, with the right proto and port if used). J. On Mon, Sep 20, 2004 at 02:09:03PM -0300, Jaime Elias da Cunha Junior wrote: > > I have a netscreen-5 device from my side and i need to connect with a Raptor > in another side. > We estabilished many parameters and implemented in both sides, but i don?t > know why this isn?t work, see some descriptions of the log > > Sep 20 11:25:26 192.168.0.251 ns5_diveo: Phase 1 (200.x1.x.x) start > (initiator) main mode. (2004-9-20 18:22:29) > Sep 20 11:25:26 192.168.0.251 ns5_diveo: Phase 1 (200.x1.x.x) complete, main > mode, 28800sec. (2004-9-20 18:22:34) > Sep 20 11:25:26 192.168.0.251 ns5_diveo: Phase 2 (200.x1.x.x) start > (initiator). (2004-9-20 18:22:34) > Sep 20 11:25:26 192.168.0.251 ns5_diveo: Recv Notify:doi(1) msg(18) > txt<INVALID_ID_INFO> (2004-9-20 18:22:36) > Sep 20 11:25:58 192.168.0.251 ns5_diveo: Recv Notify:doi(1) msg(18) > txt<INVALID_ID_INFO> (2004-9-20 18:23:01) > Sep 20 11:25:58 192.168.0.251 ns5_diveo: Recv Notify:doi(1) msg(18) > txt<INVALID_ID_INFO> (2004-9-20 18:23:06) > Sep 20 11:25:58 192.168.0.251 ns5_diveo: Give up phase 2 to 200.x1.x.x, > session id<f038b8d2>^M (2004-9-20 18:23:07) > > Someone can send help me ? (I enabled the command debug ike detail on the > console, but i don?t know how get informations of these debug) > > > > Best Regards, > > Jaime Elias da Cunha Junior > Gerente de Opera??es > [email protected] > Spring Wireless (Brasil) Ltda > Fone +55 11 3472-7031, Cel 11-8134-8712 > > _______________________________________________ > VPN mailing list > [email protected] > http://lists.shmoo.com/mailman/listinfo/vpn -- -- -> Jean-Francois Dive --> [email protected] I think that God in creating Man somewhat overestimated his ability. -- Oscar Wilde _______________________________________________ VPN mailing list [email protected] http://lists.shmoo.com/mailman/listinfo/vpn