(racoon 678) Re: racoon & ppc2003 Again

Aidas Kasparas wrote:

>>
>> spdadd 192.168.1.252[1701] 0.0.0.0/0[0] any -P out ipsec 
>> esp/transport//require;
>>
> This one looks suspicious to me. Especially, when I see the esp 
> traffic going in other direction [too].
>
> I would recomend adding another policy:
>
> spdadd 0.0.0.0/0 192.168.1.252[1701] any -P in ipsec 
> esp/transport//require; 


 thnx, now I have to resolve pppd problem :) my l2tpd say:

Aug 31 16:50:06 fireball l2tpd[4357]:
Aug 31 16:50:06 fireball pppd[4738]: pppd 2.4.1 started by root, uid 0
Aug 31 16:50:06 fireball l2tpd[4357]: control_finish: Call established 
with 192.168.1.229, Local: 18795, Remote: 1, Serial: 0
Aug 31 16:50:06 fireball l2tpd[4357]: check_control: control, cid = 0, 
Ns = 4, Nr = 2
Aug 31 16:50:06 fireball pppd[4738]: using channel 3
Aug 31 16:50:06 fireball pppd[4738]: Using interface ppp0
Aug 31 16:50:06 fireball pppd[4738]: Connect: ppp0 <--> /dev/ttyp0
Aug 31 16:50:06 fireball pppd[4738]: sent [LCP ConfReq id=0x1 <mru 1410> 
<asyncmap 0x0> <auth chap MD5> <magic 0xe46cc390> <pcomp> <accomp>]
Aug 31 16:50:06 fireball pppd[4738]: rcvd [LCP ConfReq id=0x0 <asyncmap 
0x0> <pcomp> <accomp>]
Aug 31 16:50:06 fireball pppd[4738]: sent [LCP ConfAck id=0x0 <asyncmap 
0x0> <pcomp> <accomp>]
Aug 31 16:50:06 fireball pppd[4738]: rcvd [LCP ConfNak id=0x1 <auth chap 
81>]
Aug 31 16:50:06 fireball pppd[4738]: sent [LCP ConfReq id=0x2 <mru 1410> 
<asyncmap 0x0> <magic 0xe46cc390> <pcomp> <accomp>]
Aug 31 16:50:06 fireball pppd[4738]: rcvd [LCP ConfAck id=0x2 <mru 1410> 
<asyncmap 0x0> <magic 0xe46cc390> <pcomp> <accomp>]
Aug 31 16:50:06 fireball pppd[4738]: peer refused to authenticate: 
terminating link
Aug 31 16:50:06 fireball pppd[4738]: sent [LCP TermReq id=0x3 "peer 
refused to authenticate"]
Aug 31 16:50:07 fireball pppd[4738]: rcvd [CCP ConfReq id=0x0 < 12 06 00 
00 00 01>]
Aug 31 16:50:07 fireball pppd[4738]: rcvd [IPCP ConfReq id=0x0 <compress 
VJ 0f 01> <addr 0.0.0.0> <ms-dns1 0.0.0.0> <ms-wins 0.0.0.0> <ms-dns3 
0.0.0.0> <ms-wins 0.0.0.0>]
Aug 31 16:50:07 fireball pppd[4738]: rcvd [proto=0x8057] 01 00 00 0e 01 
0a 20 00 80 ff fe 34 ba c7
Aug 31 16:50:07 fireball pppd[4738]: rcvd [LCP TermAck id=0x3]
Aug 31 16:50:07 fireball pppd[4738]: Connection terminated.
Aug 31 16:50:07 fireball l2tpd[4357]: check_control: control, cid = 1, 
Ns = 4, Nr = 2
Aug 31 16:50:07 fireball l2tpd[4357]: handle_avps: handling avp's for 
tunnel 21694, call 18795
Aug 31 16:50:07 fireball l2tpd[4357]: message_type_avp: message type 14 
(Call-Disconnect-Notify)
Aug 31 16:50:07 fireball l2tpd[4357]: result_code_avp: peer closing for 
reason 3 (Control channel already exists), error = 0 ()
Aug 31 16:50:07 fireball l2tpd[4357]: assigned_call_avp: using peer's call 1
Aug 31 16:50:07 fireball l2tpd[4357]: control_finish: Connection closed 
to 192.168.1.229, serial 0 ()
Aug 31 16:50:07 fireball pppd[4738]: Terminating on signal 15.
Aug 31 16:50:07 fireball pppd[4738]: Exit.
Aug 31 16:50:07 fireball l2tpd[4357]: check_control: control, cid = 0, 
Ns = 5, Nr = 2
Aug 31 16:50:07 fireball l2tpd[4357]: handle_avps: handling avp's for 
tunnel 21694, call 0
Aug 31 16:50:07 fireball l2tpd[4357]: message_type_avp: message type 4 
(Stop-Control-Connection-Notification)
Aug 31 16:50:07 fireball l2tpd[4357]: assigned_tunnel_avp: using peer's 
tunnel 54
Aug 31 16:50:07 fireball l2tpd[4357]: result_code_avp: peer closing for 
reason 6 (Requester is being shut down), error = 0 ()
Aug 31 16:50:07 fireball l2tpd[4357]: control_finish: Connection closed 
to 192.168.1.229, port 1701 (), Local: 21694, Remote: 54




    SysNet - via Dossi,8 27100 Pavia Tel: +390382573859 Fax: +390382476497