(racoon 667) NetScreen 5xp and racoon on OS X
ucs308 <[email protected]>
| Newsgroups | gmane.network.ipv6.kame.racoon |
|---|---|
| Message-ID | <[email protected]> |
I have tried using VPNTracker and IPSecuritas both based on Racoon. I get the same results from both tools. I am using Mac OS X 10.3.4. I have a couple of machines on the same network, 192.168.0.30 (PC) and 192.168.0.40 (Mac). On the PC I am using NetScreen Secure Remote Client, and all works well. When I try and connect from the Mac to the NetScreen, I can see by looking in the netscreen logs that the tunnel is established. I can ping the remote network, and I see the pings arrive (again in the netscreen logs). But I never get those pings back to the Mac. The complete log can be found below. My pre-shared key has been entered correctly, and the local identifier is set to a domain name. I have the PC on the same network connected to the same hub, and it works well over the vpn connection. Am I supposed to try and eliminate the warning/notify messages? How does racoon ensure the routes are updated to ensure traffic will return? Any other ideas? Aug 24 22:26:27 ZasshiTrois IPSecuritas: Racoon normally terminated Aug 24 22:26:28 ZasshiTrois IPSecuritas: Parsing configuration Aug 24 22:26:28 ZasshiTrois IPSecuritas: Setting up racoon.conf Aug 24 22:26:28 ZasshiTrois IPSecuritas: Setting up setkey.conf Aug 24 22:26:28 ZasshiTrois IPSecuritas: Setting up psk.txt Aug 24 22:26:28 ZasshiTrois IPSecuritas: Setting up tunnel.conf Aug 24 22:26:28 ZasshiTrois IPSecuritas: Parsing configuration done Aug 24 22:26:29 ZasshiTrois IPSecuritas: Starting racoon... Aug 24 22:26:29 ZasshiTrois IPSecuritas: Racoon is running Aug 24 22:26:29 ZasshiTrois IPSecuritas: Set kernel keys Aug 24 22:26:29 ZasshiTrois racoon: NOTIFY: oakley.c:2057:oakley_skeyid(): couldn't find the proper pskey, try to get one by the peer's address. Aug 24 22:26:29 ZasshiTrois racoon: NOTIFY: oakley.c:2057:oakley_skeyid(): couldn't find the proper pskey, try to get one by the peer's address. Aug 24 22:26:37 ZasshiTrois racoon: NOTIFY: isakmp.c:267:isakmp_handler(): the packet is retransmitted by 63.198.xx.xxx[500]. Aug 24 22:26:37 ZasshiTrois racoon: NOTIFY: isakmp.c:267:isakmp_handler(): the packet is retransmitted by 63.198.xx.xxx[500]. Aug 24 22:26:51 ZasshiTrois racoon: WARNING: ipsec_doi.c:920:cmp_aproppair_i(): attribute has been modified. Aug 24 22:26:51 ZasshiTrois racoon: WARNING: ipsec_doi.c:920:cmp_aproppair_i(): attribute has been modified.