Hallo zusammen, wollte heute erst mal nach dem 8.2 Update von aussen VPN aufbauen, super sache ging einfach nicht mehr. Client bringt Verbindung ab. 412 Remote peer is no longer responding. Konfig angeschaut nichts alles ok. Habe keine änderungen gemacht.
Sicher was am IDS oder sonstige security Geschichte.................
Das liegt sicher am Update, wie bringe ich dies wieder zu laufen. Ist sehr wichtig!!!
--> Vorhin hatte ich null Probleme. WAR 1A++
Mit Iphone nichts mehr, ging vorher super...............
Logs:
02 mydevice pluto[15503]: packet from xx.xx.xx.135:53760: received Vendor ID payload [XAUTH]
2011:07:26-16:23:02 mydevice pluto[15503]: packet from xx.xx.xx.135:53760: received Vendor ID payload [Dead Peer Detection]
2011:07:26-16:23:02 mydevice pluto[15503]: packet from xx.xx.xx.135:53760: ignoring Vendor ID payload [FRAGMENTATION 80000000]
2011:07:26-16:23:02 mydevice pluto[15503]: packet from xx.xx.xx.135:53760: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2011:07:26-16:23:02 mydevice pluto[15503]: packet from xx.xx.xx.135:53760: ignoring Vendor ID payload [Cisco-Unity]
2011:07:26-16:23:02 mydevice pluto[15503]: "D_for test.user to Internal (Network)"[1] xx.xx.xx.135:53760 #1: responding to Main Mode from unknown peer xx.xx.xx.135:53760
2011:07:26-16:23:02 mydevice pluto[15503]: "D_for test.user to Internal (Network)"[1] xx.xx.xx.135:53760 #1: peer requested 2147483 seconds which exceeds our limit 86400 seconds
2011:07:26-16:23:02 mydevice pluto[15503]: "D_for test.user to Internal (Network)"[1] xx.xx.xx.135:53760 #1: lifetime reduced to 86400 seconds (todo: IPSEC_RESPONDER_LIFETIME notification)
2011:07:26-16:23:02 mydevice pluto[15503]: packet from xx.xx.xx.135:53760: size (352) differs from size specified in ISAKMP HDR (336)
2011:07:26-16:23:02 mydevice pluto[15503]: packet from xx.xx.xx.135:53760: Cisco VPN client appends 16 surplus NULL bytes
2011:07:26-16:23:02 mydevice pluto[15503]: "D_for test.user to Internal (Network)"[1] xx.xx.xx.135:53760 #1: ignoring Vendor ID payload [451b2c98455azuu1ab49ae118de0]
2011:07:26-16:23:02 mydevice pluto[15503]: "D_for test.user to Internal (Network)"[1] xx.xx.xx.135:53760 #1: ignoring Vendor ID payload [Cisco-Unity]
2011:07:26-16:23:02 mydevice pluto[15503]: "D_for test.user to Internal (Network)"[1] xx.xx.xx.135:53760 #1: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: peer is NATed
2011:07:26-16:24:12 mydevice pluto[15503]: "D_for test.user to Internal (Network)"[1] xx.xx.xx.135:53760 #1: max number of retransmissions (2) reached STATE_MAIN_R2
2011:07:26-16:24:12 mydevice pluto[15503]: "D_for test.user to Internal (Network)"[1] xx.xx.xx.135:53760: deleting connection "D_for test.user to Internal (Network)"[1] instance with peer xx.xx.xx.135 {isakmp=#0/ipsec=#0}
This thread was automatically locked due to age.
