| Newsgroups |
gmane.network.freeswan.user,gmane.spam.detected |
| Message-ID |
<[email protected]> |
Hi,
sorry I need to ask again, but I have a new (old) problem.
I asked a friend to connect to my VPN. I sent him my certificate and when he
tried all I got was this:
Aug 9 20:00:55 mngateway pluto[8793]: packet from 80.185.196.79:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
Aug 9 20:00:55 mngateway pluto[8793]: packet from 80.185.196.79:500: ignoring Vendor ID payload [FRAGMENTATION]
Aug 9 20:00:55 mngateway pluto[8793]: packet from 80.185.196.79:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
Aug 9 20:00:55 mngateway pluto[8793]: packet from 80.185.196.79:500: ignoring Vendor ID payload [26244d38eddb61b3...]
Aug 9 20:00:55 mngateway pluto[8793]: "L2TP-CERT"[1] 80.185.196.79 #1: responding to Main Mode from unknown peer 80.185.196.79
Aug 9 20:00:56 mngateway pluto[8793]: "L2TP-CERT"[1] 80.185.196.79 #1: Peer ID is ID_DER_ASN1_DN: 'C=DE, O=Multinova GmbH, OU=VPN, CN=VPNCA'
Aug 9 20:00:56 mngateway pluto[8793]: "L2TP-CERT"[1] 80.185.196.79 #1: sent MR3, ISAKMP SA established
Aug 9 20:00:56 mngateway pluto[8793]: "L2TP-CERT"[1] 80.185.196.79 #1: cannot respond to IPsec SA request because no connection is known for 192.6.2.11/32===217.82.85.168[C=DE, O=Multinova GmbH, CN=Multinova CA]...80.185.196.79[C=DE, O=Multinova GmbH, OU=VPN, CN=VPNCA]===192.168.100.101/32
Aug 9 20:00:56 mngateway pluto[8793]: "L2TP-CERT"[1] 80.185.196.79 #1: sending encrypted notification INVALID_ID_INFORMATION to 80.185.196.79:500
Aug 9 20:00:58 mngateway pluto[8793]: "L2TP-CERT"[1] 80.185.196.79 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x35f32eac (perhaps this is a duplicated packet)
Aug 9 20:00:58 mngateway pluto[8793]: "L2TP-CERT"[1] 80.185.196.79 #1: sending encrypted notification INVALID_MESSAGE_ID to 80.185.196.79:500
Aug 9 20:01:00 mngateway pluto[8793]: "L2TP-CERT"[1] 80.185.196.79 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x35f32eac (perhaps this is a duplicated packet)
Aug 9 20:01:00 mngateway pluto[8793]: "L2TP-CERT"[1] 80.185.196.79 #1: sending encrypted notification INVALID_MESSAGE_ID to 80.185.196.79:500
Aug 9 20:01:04 mngateway pluto[8793]: "L2TP-CERT"[1] 80.185.196.79 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x35f32eac (perhaps this is a duplicated packet)
Aug 9 20:01:04 mngateway pluto[8793]: "L2TP-CERT"[1] 80.185.196.79 #1: sending encrypted notification INVALID_MESSAGE_ID to 80.185.196.79:500
Aug 9 20:01:12 mngateway pluto[8793]: "L2TP-CERT"[1] 80.185.196.79 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x35f32eac (perhaps this is a duplicated packet)
Aug 9 20:01:12 mngateway pluto[8793]: "L2TP-CERT"[1] 80.185.196.79 #1: sending encrypted notification INVALID_MESSAGE_ID to 80.185.196.79:500
Aug 9 20:01:28 mngateway pluto[8793]: "L2TP-CERT"[1] 80.185.196.79 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x35f32eac (perhaps this is a duplicated packet)
Aug 9 20:01:28 mngateway pluto[8793]: "L2TP-CERT"[1] 80.185.196.79 #1: sending encrypted notification INVALID_MESSAGE_ID to 80.185.196.79:500
In my Ipsec.conf is "right=%any" ... so why can't pluto find the connection? I did not change anything. Within my home network everything is fine.
Thanks again for your help.
Greetings,
Kai