I'm struggling & hope someone can help!
PPTP remote access works but connection keeps dropping so am trying IPSec and have a problem with this. On the client running SSL Sentinel diagnostics the IKE negotiation is OK, the remote X509 cert is OK, but stalls with "cannot negotiate IPSec protocol". On ASL (see log extract at end) there are two entries with look worring - "Issuer CRL not found", and "cannot respond to IPsec SA request because no connection is known for 0.0.0.0/0===195.102.20.20...213.152.10.10===192.168.1.8/32".
Any ideas?
Config start ========================
Roadwarrier 213.152.10.10 NATed to 192.168.1.8
ADSL Router/Firewall forwards all incoming AH traffic(prot=51), all ESP traffic (prot=50), all GRE traffic (prot=47), and all IKE traffic (port 500 UDP) to 192.168.1.8.
ASL 3.2 195.102.20.20
Config end ========================
IPSec Log start ======================
Jan 8 20:50:55 (none) Pluto[13341]: packet from 213.152.10.10:500: ignoring Vendor ID payload
Jan 8 20:50:55 (none) Pluto[13341]: "Any_1" 213.152.10.10 #25: responding to Main Mode from unknown peer 213.152.10.10
Jan 8 20:50:55 (none) Pluto[13341]: "Any_1" 213.152.10.10 #25: ignoring informational payload, type IPSEC_INITIAL_CONTACT
Jan 8 20:50:55 (none) Pluto[13341]: "Any_1" 213.152.10.10 #25: Peer ID is ID_IPV4_ADDR: '213.152.10.10'
Jan 8 20:50:55 (none) Pluto[13341]: "Any_1" 213.152.10.10 #25: Issuer CRL not found
Jan 8 20:50:55 (none) Pluto[13341]: "Any_1" 213.152.10.10 #25: Issuer CRL not found
Jan 8 20:50:55 (none) Pluto[13341]: "Any_1" 213.152.10.10 #25: sent MR3, ISAKMP SA established
Jan 8 20:50:55 (none) Pluto[13341]: "Any_1" 213.152.10.10 #26: cannot respond to IPsec SA request because no connection is known for 0.0.0.0/0===195.102.20.20...213.152.10.10===192.168.1.8/32
Jan 8 20:50:56 (none) Pluto[13341]: "Any_1" 213.152.10.10 #25: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x252f833c (perhaps this is a duplicated packet)
Jan 8 20:51:25 (none) Pluto[13341]: "Any_1" 213.152.10.10 #25: ignoring Delete SA payload
IPSec Log end ======================
This thread was automatically locked due to age.
