(racoon 822) Re: WARNING: CR received, ignore it. It should be in other exchange.

On Thu, 30 Sep 2004 13:18:30 -0600
Hans Fugal <[email protected]> wrote:

> I have set up racoon to racoon with certificates and it works well.
> Now I'm trying to connect to the Netscreen (NS25) at work, and I get
> this from racoon:
> 
> 2004-09-30 13:10:36: INFO: respond new phase 1 negotiation:
> 166.70.37.149[500]<=>204.96.22.194[500]
> 2004-09-30 13:10:36: INFO: begin Identity Protection mode.
> 2004-09-30 13:10:36: WARNING: CR received, ignore it. It should be in
> other exchange.
> 2004-09-30 13:10:37: INFO: ISAKMP-SA established
> 166.70.37.149[500]-204.96.22.194[500]
> spi:9e12c36584dd26f4:73b86302819aac9c
Hi,

Have you set up racoon with aggressive mode?
In aggressive mode, racoon can't connect to Netscreen 
with certificates because it doesn't encrypt
the third message payload and Netscreen can't accept it.

thanks
-- 
-----------------------------
   - YAMASHITA Yutaka -    
 Keio Univ. ICS. Teraoka Lab 
 [email protected]
-----------------------------