(racoon 926) Re: Problems talking with Checkpoint-NG
Satoshi Inoue <[email protected]> Fri, 1 Apr 2005 16:49:42 +0900
| Newsgroups | gmane.network.ipv6.kame.racoon |
|---|---|
| Message-ID | <[email protected]> |
On Thu, 31 Mar 2005 14:05:06 +0100 Hamie <[email protected]> wrote: > 2005-03-31 11:10:08: INFO: respond new phase 2 negotiation: > 192.168.254.254[0]<=>163.166.150.105[0] > 2005-03-31 11:10:08: ERROR: invalid value of DOI 0x00000038. The IANA Assigned Number for the IPSEC DOI is 1. So I don't understand why Checkpoint-NG F/W is sending such a value. It looks like the negotiation succeeds with racoon as an initiator, but not with racoon as a responder. Byte ordering problem in ipsec-tools, racoon or Checkpoint-NG F/W?? I'm not sure. I think you need to do some hacking.