(racoon 945) racoon + Cisco VPN Client
"Sergiy Lozovsky" <[email protected]> Mon, 11 Jul 2005 15:12:26 -0700
| Newsgroups | gmane.network.ipv6.kame.racoon |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. ------=_NextPart_000_0001_01C5862A.F41B1090 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Hi, I try to use Cisco VPN Client with racoon. From what I can see raccoon supports CISCO Client only in a hybrid mode. CISCO Client can be set up for 'Group Authentication' (without any certificates). When it connects to raccoon - phase 1 is ok, but after that CISCO complains: 89 14:51:36.546 07/11/05 Sev=Info/4 IKE/0x63000017 Marking IKE SA for deletion (I_Cookie=434DF5DFB40ECB39 R_Cookie=CF982318DD2078D0) reason = DEL_REASON_NON_UNITY_PEER It expects VENDORID_UNITY from us. Racoon sets VENDORID_UNITY only for a hybrid authentication. Can someone clarify: 1. What is VENDORID_UNITY means? Hybrid auth? Or anything else? 2. Can CISCO Client work with raccoon using just shared key? Thanks, Sergiy. ------=_NextPart_000_0001_01C5862A.F41B1090 Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable <html xmlns:o=3D"urn:schemas-microsoft-com:office:office" = xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:st1=3D"urn:schemas-microsoft-com:office:smarttags" = xmlns=3D"http://www.w3.org/TR/REC-html40"> <head> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Dus-ascii"> <meta name=3DProgId content=3DWord.Document> <meta name=3DGenerator content=3D"Microsoft Word 10"> <meta name=3DOriginator content=3D"Microsoft Word 10"> <link rel=3DFile-List href=3D"cid:[email protected]"> <o:SmartTagType = namespaceuri=3D"urn:schemas-microsoft-com:office:smarttags" name=3D"date"/> <!--[if gte mso 9]><xml> <o:OfficeDocumentSettings> <o:DoNotRelyOnCSS/> </o:OfficeDocumentSettings> </xml><![endif]--><!--[if gte mso 9]><xml> <w:WordDocument> <w:SpellingState>Clean</w:SpellingState> <w:GrammarState>Clean</w:GrammarState> <w:DocumentKind>DocumentEmail</w:DocumentKind> <w:EnvelopeVis/> <w:Compatibility> <w:BreakWrappedTables/> <w:SnapToGridInCell/> <w:WrapTextWithPunct/> <w:UseAsianBreakRules/> </w:Compatibility> <w:BrowserLevel>MicrosoftInternetExplorer4</w:BrowserLevel> </w:WordDocument> </xml><![endif]--><!--[if !mso]> <style> st1\:*{behavior:url(#default#ieooui) } </style> <![endif]--> <style> <!-- /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-parent:""; margin:0in; margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:12.0pt; font-family:"Times New Roman"; mso-fareast-font-family:"Times New Roman";} a:link, span.MsoHyperlink {color:blue; text-decoration:underline; text-underline:single;} a:visited, span.MsoHyperlinkFollowed {color:purple; text-decoration:underline; text-underline:single;} span.EmailStyle17 {mso-style-type:personal-compose; mso-style-noshow:yes; mso-ansi-font-size:10.0pt; mso-bidi-font-size:10.0pt; font-family:Arial; mso-ascii-font-family:Arial; mso-hansi-font-family:Arial; mso-bidi-font-family:Arial; color:windowtext;} span.SpellE {mso-style-name:""; mso-spl-e:yes;} span.GramE {mso-style-name:""; mso-gram-e:yes;} @page Section1 {size:8.5in 11.0in; margin:1.0in 1.25in 1.0in 1.25in; mso-header-margin:.5in; mso-footer-margin:.5in; mso-paper-source:0;} div.Section1 {page:Section1;} /* List Definitions */ @list l0 {mso-list-id:751198172; mso-list-type:hybrid; mso-list-template-ids:-1973271378 67698703 67698713 67698715 67698703 = 67698713 67698715 67698703 67698713 67698715;} @list l0:level1 {mso-level-tab-stop:.5in; mso-level-number-position:left; text-indent:-.25in;} ol {margin-bottom:0in;} ul {margin-bottom:0in;} --> </style> <!--[if gte mso 10]> <style> /* Style Definitions */=20 table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:10.0pt; font-family:"Times New Roman";} </style> <![endif]--> </head> <body lang=3DEN-US link=3Dblue vlink=3Dpurple = style=3D'tab-interval:.5in'> <div class=3DSection1> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>Hi,<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>I try to use Cisco VPN Client with <span = class=3DSpellE>racoon</span>. From what I can see raccoon supports CISCO Client only in a hybrid = mode.<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>CISCO Client can be set up for ‘Group = Authentication’ (without any certificates). When it connects to raccoon – phase 1 = is ok, but after that CISCO complains:<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>89<span = style=3D'mso-spacerun:yes'> </span><span class=3DGramE>14:51:36.546<span = style=3D'mso-spacerun:yes'> </span></span></span></font><st1:date Month=3D"7" Day=3D"11" = Year=3D"2005"><span class=3DGramE><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt;font-family: Arial'>07</span></font></span><font size=3D2 face=3DArial><span = style=3D'font-size: 10.0pt;font-family:Arial'>/11/05</span></font></st1:date><font size=3D2 face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial'><span style=3D'mso-spacerun:yes'> </span><span = class=3DSpellE>Sev</span>=3DInfo/4<span style=3D'mso-tab-count:1'> = </span>IKE/0x63000017<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>Marking IKE SA for <span class=3DGramE>deletion<span style=3D'mso-spacerun:yes'> </span>(</span><span = class=3DSpellE>I_Cookie</span>=3D434DF5DFB40ECB39 <span class=3DSpellE>R_Cookie</span>=3DCF982318DD2078D0) reason =3D DEL_REASON_NON_UNITY_PEER<o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'>It expects VENDORID_UNITY from us. <span = class=3DSpellE>Racoon</span> sets VENDORID_UNITY only for a hybrid authentication. Can someone <span class=3DGramE>clarify:</span><o:p></o:p></span></font></p> <p class=3DMsoNormal><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt; font-family:Arial'><o:p> </o:p></span></font></p> <ol style=3D'mso-margin-top-alt:0in' start=3D1 type=3D1> <li class=3DMsoNormal style=3D'mso-list:l0 level1 lfo1;tab-stops:list = .5in'><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt;font-family:Arial'>What is VENDORID_UNITY means? Hybrid auth? Or anything = else?<o:p></o:p></span></font></li> <li class=3DMsoNormal style=3D'mso-list:l0 level1 lfo1;tab-stops:list = .5in'><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt;font-family:Arial'>Can CISCO Client work with raccoon using just shared = key?<o:p></o:p></span></font></li> </ol> <p class=3DMsoNormal style=3D'margin-left:.25in'><font size=3D2 = face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></fo= nt></p> <p class=3DMsoNormal style=3D'margin-left:.25in'><font size=3D2 = face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></fo= nt></p> <p class=3DMsoNormal style=3D'margin-left:.25in'><font size=3D2 = face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial'>Thanks,<o:p></o:p></span></f= ont></p> <p class=3DMsoNormal style=3D'margin-left:.25in'><font size=3D2 = face=3DArial><span style=3D'font-size:10.0pt;font-family:Arial'><o:p> </o:p></span></fo= nt></p> <p class=3DMsoNormal style=3D'margin-left:.25in'><span = class=3DSpellE><span class=3DGramE><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt;font-family: Arial'>Sergiy</span></font></span></span><span class=3DGramE><font = size=3D2 face=3DArial><span = style=3D'font-size:10.0pt;font-family:Arial'>.</span></font></span><font size=3D2 face=3DArial><span = style=3D'font-size:10.0pt;font-family:Arial'> = <o:p></o:p></span></font></p> </div> </body> </html> ------=_NextPart_000_0001_01C5862A.F41B1090--