Hi,
i have setup the VPN connection like the "X.509 How-To" document described.
The connection doesn´t work and i see the following in the Live Log.
2003-Nov 14 13:43:01 (none) pluto[7220]: Warning: empty directory
2003-Nov 14 13:43:01 (none) pluto[7220]: loaded cacert file 'Astaro.pem' (1070 bytes)
2003-Nov 14 13:43:01 (none) pluto[7220]: loaded my default X.509 cert file '/etc/x509cert.der' (947 bytes)
2003-Nov 14 13:43:01 (none) pluto[7220]: loaded private key file '/etc/ipsec.d/private/AstaroCert.pem' (963 bytes)
2003-Nov 14 13:43:01 (none) pluto[7220]: Changing to directory '/etc/ipsec.d/cacerts'
2003-Nov 14 13:43:01 (none) pluto[7220]: Changing to directory '/etc/ipsec.d/crls'
2003-Nov 14 13:43:01 (none) pluto[7220]: adding interface ipsec0/eth2 xxx.xxx.xxx.xx
2003-Nov 14 13:43:01 (none) pluto[7220]: adding interface ipsec0/eth2 xxx.xxx.xxx.xx:4500
2003-Nov 14 13:43:01 (none) pluto[7220]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
2003-Nov 14 13:43:01 (none) pluto[7220]: ike_alg_register_enc(): Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0)
2003-Nov 14 13:43:01 (none) pluto[7220]: ike_alg_register_enc(): Activating OAKLEY_CAST_CBC: Ok (ret=0)
2003-Nov 14 13:43:01 (none) pluto[7220]: ike_alg_register_enc(): Activating OAKLEY_SERPENT_CBC: Ok (ret=0)
2003-Nov 14 13:43:01 (none) pluto[7220]: ike_alg_register_enc(): Activating OAKLEY_SSH_PRIVATE_65289: Ok (ret=0)
2003-Nov 14 13:43:01 (none) pluto[7220]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC: Ok (ret=0)
2003-Nov 14 13:43:01 (none) pluto[7220]: ike_alg_register_hash(): Activating OAKLEY_SHA2_256: Ok (ret=0)
2003-Nov 14 13:43:01 (none) pluto[7220]: ike_alg_register_hash(): Activating OAKLEY_SHA2_512: Ok (ret=0)
2003-Nov 14 13:43:01 (none) pluto[7220]: listening for IKE messages
2003-Nov 14 13:43:01 (none) pluto[7220]: loading secrets from "/etc/ipsec.secrets"
2003-Nov 14 13:43:01 (none) pluto[7220]: | from whack: got --esp=aes128-md5;modp1536
2003-Nov 14 13:43:01 (none) pluto[7220]: | from whack: got --ike=3des-md5-modp1536
2003-Nov 14 13:53:02 (none) pluto[7220]: packet from 145.254.36.113:500: ignoring Vendor ID payload [SSH Sentinel 1.4.1]
2003-Nov 14 13:53:02 (none) pluto[7220]: packet from 145.254.36.113:500: ignoring Vendor ID payload [draft-stenberg-ipsec-nat-traversal-02]
2003-Nov 14 13:53:02 (none) pluto[7220]: packet from 145.254.36.113:500: ignoring Vendor ID payload [draft-stenberg-ipsec-nat-traversal-01]
2003-Nov 14 13:53:02 (none) pluto[7220]: packet from 145.254.36.113:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
2003-Nov 14 13:53:02 (none) pluto[7220]: packet from 145.254.36.113:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2003-Nov 14 13:53:02 (none) pluto[7220]: packet from 145.254.36.113:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]
2003-Nov 14 13:53:02 (none) pluto[7220]: packet from 145.254.36.113:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
2003-Nov 14 13:53:02 (none) pluto[7220]: packet from 145.254.36.113:500: ignoring Vendor ID payload [XAUTH]
2003-Nov 14 13:53:02 (none) pluto[7220]: "AndreasRoadwarrior_1"[3] 145.254.36.113 #4: responding to Main Mode from unknown peer 145.254.36.113
2003-Nov 14 13:53:02 (none) pluto[7220]: "AndreasRoadwarrior_1"[3] 145.254.36.113 #4: policy does not allow OAKLEY_RSA_SIG authentication. Attribute OAKLEY_AUTHENTICATION_METHOD
2003-Nov 14 13:53:02 (none) last message repeated 41 times
2003-Nov 14 13:53:02 (none) pluto[7220]: "AndreasRoadwarrior_1"[3] 145.254.36.113 #4: no acceptable Oakley Transform
2003-Nov 14 13:53:02 (none) pluto[7220]: "AndreasRoadwarrior_1"[3] 145.254.36.113 #4: sending notification NO_PROPOSAL_CHOSEN to 145.254.36.113:500
2003-Nov 14 13:53:02 (none) pluto[7220]: "AndreasRoadwarrior_1"[3] 145.254.36.113: deleting connection "AndreasRoadwarrior_1" instance with peer 145.254.36.113
2003-Nov 14 13:53:10 (none) pluto[7220]: packet from 145.254.36.113:500: ignoring Vendor ID payload [SSH Sentinel 1.4.1]
2003-Nov 14 13:53:10 (none) pluto[7220]: packet from 145.254.36.113:500: ignoring Vendor ID payload [draft-stenberg-ipsec-nat-traversal-02]
2003-Nov 14 13:53:10 (none) pluto[7220]: packet from 145.254.36.113:500: ignoring Vendor ID payload [draft-stenberg-ipsec-nat-traversal-01]
2003-Nov 14 13:53:10 (none) pluto[7220]: packet from 145.254.36.113:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
2003-Nov 14 13:53:10 (none) pluto[7220]: packet from 145.254.36.113:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2003-Nov 14 13:53:10 (none) pluto[7220]: packet from 145.254.36.113:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]
2003-Nov 14 13:53:10 (none) pluto[7220]: packet from 145.254.36.113:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
2003-Nov 14 13:53:10 (none) pluto[7220]: packet from 145.254.36.113:500: ignoring Vendor ID payload [XAUTH]
2003-Nov 14 13:53:10 (none) pluto[7220]: "AndreasRoadwarrior_1"[4] 145.254.36.113 #5: responding to Main Mode from unknown peer 145.254.36.113
2003-Nov 14 13:53:10 (none) pluto[7220]: "AndreasRoadwarrior_1"[4] 145.254.36.113 #5: policy does not allow OAKLEY_RSA_SIG authentication. Attribute OAKLEY_AUTHENTICATION_METHOD
2003-Nov 14 13:53:10 (none) last message repeated 41 times
2003-Nov 14 13:53:10 (none) pluto[7220]: "AndreasRoadwarrior_1"[4] 145.254.36.113 #5: no acceptable Oakley Transform
2003-Nov 14 13:53:10 (none) pluto[7220]: "AndreasRoadwarrior_1"[4] 145.254.36.113 #5: sending notification NO_PROPOSAL_CHOSEN to 145.254.36.113:500
2003-Nov 14 13:53:10 (none) pluto[7220]: "AndreasRoadwarrior_1"[4] 145.254.36.113: deleting connection "AndreasRoadwarrior_1" instance with peer 145.254.36.113
Can anybody help me, what´s going wrong.
Tank you for youre effort,
Andreas
This thread was automatically locked due to age.
