(racoon 667) NetScreen 5xp and racoon on OS X

ucs308 <[email protected]>
Newsgroups gmane.network.ipv6.kame.racoon
Message-ID <[email protected]>
I have tried using VPNTracker and IPSecuritas both based on Racoon. I 
get the same results from both tools. I am using Mac OS X 10.3.4. I 
have a couple of machines on the same network, 192.168.0.30 (PC) and 
192.168.0.40 (Mac). On the PC I am using NetScreen Secure Remote 
Client,  and all works well.

When I try and connect from the Mac to the NetScreen, I can see by 
looking in the netscreen logs that the tunnel is established. I can 
ping the remote network, and I see the pings arrive (again in the 
netscreen logs). But I never  get those pings back to the Mac. The 
complete log can be found below.

My pre-shared key has been entered correctly, and the local identifier 
is set to a domain name. I have the PC on the same network connected to 
the same hub, and it works well over the vpn connection.

Am I supposed to try and eliminate the warning/notify messages?
How does racoon ensure the routes are updated to ensure traffic will 
return?

Any other ideas?


Aug 24 22:26:27 ZasshiTrois IPSecuritas: Racoon normally terminated
Aug 24 22:26:28 ZasshiTrois IPSecuritas: Parsing configuration
Aug 24 22:26:28 ZasshiTrois IPSecuritas: Setting up racoon.conf
Aug 24 22:26:28 ZasshiTrois IPSecuritas: Setting up setkey.conf
Aug 24 22:26:28 ZasshiTrois IPSecuritas: Setting up psk.txt
Aug 24 22:26:28 ZasshiTrois IPSecuritas: Setting up tunnel.conf
Aug 24 22:26:28 ZasshiTrois IPSecuritas: Parsing configuration done
Aug 24 22:26:29 ZasshiTrois IPSecuritas: Starting racoon...
Aug 24 22:26:29 ZasshiTrois IPSecuritas: Racoon is running
Aug 24 22:26:29 ZasshiTrois IPSecuritas: Set kernel keys
Aug 24 22:26:29 ZasshiTrois racoon: NOTIFY: 
oakley.c:2057:oakley_skeyid(): couldn't find the proper pskey, try to 
get one by the peer's address.
Aug 24 22:26:29 ZasshiTrois racoon: NOTIFY: 
oakley.c:2057:oakley_skeyid(): couldn't find the proper pskey, try to 
get one by the peer's address.
Aug 24 22:26:37 ZasshiTrois racoon: NOTIFY: 
isakmp.c:267:isakmp_handler(): the packet is retransmitted by 
63.198.xx.xxx[500].
Aug 24 22:26:37 ZasshiTrois racoon: NOTIFY: 
isakmp.c:267:isakmp_handler(): the packet is retransmitted by 
63.198.xx.xxx[500].
Aug 24 22:26:51 ZasshiTrois racoon: WARNING: 
ipsec_doi.c:920:cmp_aproppair_i(): attribute has been modified.
Aug 24 22:26:51 ZasshiTrois racoon: WARNING: 
ipsec_doi.c:920:cmp_aproppair_i(): attribute has been modified.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.