ich habe nach dieser Anleitung eine CFG für die Fritzbox erstellt, die Einstellungen auf der ASG vorgenommen und diese dann so wie hier verändert.
Also ist meine CFG jetzt so:
{
enabled = yes;
conn_type = conntype_lan;
name = "SZ1ASG01";
always_renew = yes;
reject_not_encrypted = no;
dont_filter_netbios = yes;
localip = 0.0.0.0;
local_virtualip = 0.0.0.0;
remoteip = 0.0.0.0;
remote_virtualip = 0.0.0.0;
remotehostname = "standort1-dyndns";
localid {
fqdn = "standort2-dyndns";
}
remoteid {
fqdn = "standort1-dyndns";
}
mode = phase1_mode_idp;
phase1ss = "alt/all-no-aes/all";
keytype = connkeytype_pre_shared;
key = "1234567";
cert_do_server_auth = no;
use_nat_t = no;
use_xauth = no;
use_cfgmode = no;
phase2localid {
ipnet {
ipaddr = 192.168.157.0;
mask = 255.255.255.0;
}
}
phase2ss = "esp-3des-sha/ah-no/comp-no/pfs";
accesslist = "permit ip any 192.168.177.0 255.255.255.0";
}
In der Astaro sieht es so aus:
Allerdings kommt der Tunnel nicht hoch.
Das Log sagt:
2010:03:31-14:53:24 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: received Vendor ID payload [XAUTH]
2010:03:31-14:53:24 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: received Vendor ID payload [Dead Peer Detection]
2010:03:31-14:53:24 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: Can't authenticate: no preshared key found for `ip-standort1' and `@dyndns-standort2'. Attribute OAKLEY_AUTHENTICATION_METHOD
2010:03:31-14:53:24 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: no acceptable Oakley Transform
2010:03:31-14:53:24 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: sending notification NO_PROPOSAL_CHOSEN to ip-standort2:500
2010:03:31-14:54:04 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: received Vendor ID payload [XAUTH]
2010:03:31-14:54:04 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: received Vendor ID payload [Dead Peer Detection]
2010:03:31-14:54:04 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: Can't authenticate: no preshared key found for `ip-standort1' and `@dyndns-standort2'. Attribute OAKLEY_AUTHENTICATION_METHOD
2010:03:31-14:54:04 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: no acceptable Oakley Transform
2010:03:31-14:54:04 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: sending notification NO_PROPOSAL_CHOSEN to ip-standort2:500
2010:03:31-14:54:44 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: received Vendor ID payload [XAUTH]
2010:03:31-14:54:44 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: received Vendor ID payload [Dead Peer Detection]
2010:03:31-14:54:44 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: Can't authenticate: no preshared key found for `ip-standort1' and `@dyndns-standort2'. Attribute OAKLEY_AUTHENTICATION_METHOD
2010:03:31-14:54:44 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: no acceptable Oakley Transform
2010:03:31-14:54:44 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: sending notification NO_PROPOSAL_CHOSEN to ip-standort2:500
2010:03:31-14:55:24 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: received Vendor ID payload [XAUTH]
2010:03:31-14:55:24 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: received Vendor ID payload [Dead Peer Detection]
2010:03:31-14:55:24 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: Can't authenticate: no preshared key found for `ip-standort1' and `@dyndns-standort2'. Attribute OAKLEY_AUTHENTICATION_METHOD
2010:03:31-14:55:24 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: no acceptable Oakley Transform
2010:03:31-14:55:24 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: sending notification NO_PROPOSAL_CHOSEN to ip-standort2:500
2010:03:31-14:56:04 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: received Vendor ID payload [XAUTH]
2010:03:31-14:56:04 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: received Vendor ID payload [Dead Peer Detection]
2010:03:31-14:56:04 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: Can't authenticate: no preshared key found for `ip-standort1' and `@dyndns-standort2'. Attribute OAKLEY_AUTHENTICATION_METHOD
2010:03:31-14:56:04 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: no acceptable Oakley Transform
2010:03:31-14:56:04 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: sending notification NO_PROPOSAL_CHOSEN to ip-standort2:500
2010:03:31-14:56:44 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: received Vendor ID payload [XAUTH]
2010:03:31-14:56:44 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: received Vendor ID payload [Dead Peer Detection]
2010:03:31-14:56:44 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: Can't authenticate: no preshared key found for `ip-standort1' and `@dyndns-standort2'. Attribute OAKLEY_AUTHENTICATION_METHOD
2010:03:31-14:56:44 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: no acceptable Oakley Transform
2010:03:31-14:56:44 sz1asg01 pluto[3436]: "S_REF_OdwEjgnYIq_0" #206: sending notification NO_PROPOSAL_CHOSEN to ip-standort2:500
Weiß von euch jemand woran es liegen könnte? ist bestimmt ein ganz einfacher Fehler [;)]
Danke!
This thread was automatically locked due to age.
