Hello everybody,
I'm trying to establish a VPN connection while on the road by means of a 3G/UMTS connection.
My notebook tells me it's trying to connect and after a while that the Astaro box (5.014) at home is not responding.
I have three different log files here and I do see the connection but I don't quite understand why it's not working.
Can anybody please shed some light on this?
Thanks in advance!
Andreas
In this example, the notebook is 10.129.8.234 while the Astaro box is 212.202.175.213. I don't know who / what 212.23.126.4 is...
tcpdump from notebook:
16:28:08.151048 IP 10.129.8.234.isakmp > port-212-202-175-213.dynamic.qsc.de.isakmp: isakmp: phase 1 I ident
16:28:09.136491 IP port-212-202-175-213.dynamic.qsc.de.isakmp > 10.129.8.234.isakmp: isakmp: phase 1 R ident
16:28:09.180110 IP 10.129.8.234.isakmp > port-212-202-175-213.dynamic.qsc.de.isakmp: isakmp: phase 1 I ident
16:28:09.978129 IP port-212-202-175-213.dynamic.qsc.de.isakmp > 10.129.8.234.isakmp: isakmp: phase 1 R ident
16:28:10.040039 IP 10.129.8.234.isakmp > port-212-202-175-213.dynamic.qsc.de.isakmp: isakmp: phase 1 I ident[E]
16:28:10.773713 IP port-212-202-175-213.dynamic.qsc.de.isakmp > 10.129.8.234.isakmp: isakmp: phase 1 R ident[E]
16:28:10.774994 IP 10.129.8.234.isakmp > port-212-202-175-213.dynamic.qsc.de.isakmp: isakmp: phase 2/others I inf[E]
16:28:11.777187 IP 10.129.8.234.isakmp > port-212-202-175-213.dynamic.qsc.de.isakmp: isakmp: phase 2/others I oakley-quick[E]
16:28:14.237801 IP port-212-202-175-213.dynamic.qsc.de.isakmp > 10.129.8.234.isakmp: isakmp: phase 2/others R oakley-quick[E]
16:28:14.239056 IP 10.129.8.234.isakmp > port-212-202-175-213.dynamic.qsc.de.isakmp: isakmp: phase 2/others I oakley-quick[E]
16:28:17.047273 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0x1)
16:28:20.047848 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0x2)
16:28:23.048422 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0x3)
16:28:26.049074 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0x4)
16:28:29.049780 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0x5)
16:28:32.050447 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0x6)
16:28:35.050983 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0x7)
16:28:38.051638 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0x8)
16:28:41.052191 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0x9)
16:28:44.052831 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0xa)
16:28:47.053432 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0xb)
16:28:50.054029 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0xc)
16:28:53.054669 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0xd)
16:28:56.055283 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0xe)
16:28:59.055896 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0xf)
16:29:02.056497 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0x10)
16:29:05.057122 IP 10.129.8.234 > port-212-202-175-213.dynamic.qsc.de: ESP(spi=0x4880ff6e,seq=0x11)
16:29:08.086675 IP 10.129.8.234.isakmp > port-212-202-175-213.dynamic.qsc.de.isakmp: isakmp: phase 2/others I inf[E]
16:29:08.087501 IP 10.129.8.234.isakmp > port-212-202-175-213.dynamic.qsc.de.isakmp: isakmp: phase 2/others I inf[E]
16:29:08.948333 IP port-212-202-175-213.dynamic.qsc.de.isakmp > 10.129.8.234.isakmp: isakmp: phase 2/others R inf[E]
16:29:09.035099 IP port-212-202-175-213.dynamic.qsc.de.isakmp > 10.129.8.234.isakmp: isakmp: phase 2/others R inf[E]
IPSec VPN log:
2004:07:14-16:28:05 (none) pluto[28571]: packet from 212.23.126.4:40: ignoring Vendor ID payload [4df37928e9fc4fd1...]
2004:07:14-16:28:05 (none) pluto[28571]: "S_TestRoadWarrior_1"[1] 212.23.126.4:40 #1: responding to Main Mode from unknown peer 212.23.126.4:40
2004:07:14-16:28:05 (none) pluto[28571]: "S_TestRoadWarrior_1"[1] 212.23.126.4:40 #1: transition from state (null) to state STATE_MAIN_R1
2004:07:14-16:28:06 (none) pluto[28571]: "S_TestRoadWarrior_1"[1] 212.23.126.4:40 #1: ignoring Vendor ID payload [KAME/racoon]
2004:07:14-16:28:06 (none) pluto[28571]: "S_TestRoadWarrior_1"[1] 212.23.126.4:40 #1: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
2004:07:14-16:28:07 (none) pluto[28571]: "S_TestRoadWarrior_1"[1] 212.23.126.4:40 #1: Main mode peer ID is ID_IPV4_ADDR: '10.129.8.234'
2004:07:14-16:28:07 (none) pluto[28571]: "S_TestRoadWarrior_1"[2] 212.23.126.4:40 #1: deleting connection "S_TestRoadWarrior_1" instance with peer 212.23.126.4
2004:07:14-16:28:07 (none) pluto[28571]: "S_TestRoadWarrior_1"[2] 212.23.126.4:40 #1: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
2004:07:14-16:28:07 (none) pluto[28571]: "S_TestRoadWarrior_1"[2] 212.23.126.4:40 #1: sent MR3, ISAKMP SA established
2004:07:14-16:28:08 (none) pluto[28571]: "S_TestRoadWarrior_1"[2] 212.23.126.4:40 #1: ignoring informational payload, type IPSEC_INITIAL_CONTACT
2004:07:14-16:28:08 (none) pluto[28571]: "S_TestRoadWarrior_1"[2] 212.23.126.4:40 #1: received and ignored informational message
2004:07:14-16:28:09 (none) pluto[28571]: "S_TestRoadWarrior_0"[1] 212.23.126.4:40 #2: responding to Quick Mode
2004:07:14-16:28:09 (none) pluto[28571]: "S_TestRoadWarrior_0"[1] 212.23.126.4:40 #2: transition from state (null) to state STATE_QUICK_R1
2004:07:14-16:28:12 (none) pluto[28571]: "S_TestRoadWarrior_0"[1] 212.23.126.4:40 #2: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
2004:07:14-16:28:12 (none) pluto[28571]: "S_TestRoadWarrior_0"[1] 212.23.126.4:40 #2: IPsec SA established
2004:07:14-16:29:05 (none) pluto[28571]: "S_TestRoadWarrior_1"[2] 212.23.126.4:40 #1: received Delete SA payload: deleting IPSEC State #2
2004:07:14-16:29:05 (none) pluto[28571]: "S_TestRoadWarrior_1"[2] 212.23.126.4:40 #1: deleting connection "S_TestRoadWarrior_0" instance with peer 212.23.126.4
2004:07:14-16:29:05 (none) pluto[28571]: "S_TestRoadWarrior_1"[2] 212.23.126.4:40 #1: received and ignored informational message
2004:07:14-16:29:05 (none) pluto[28571]: "S_TestRoadWarrior_1"[2] 212.23.126.4:40 #1: received Delete SA payload: deleting ISAKMP State #1
2004:07:14-16:29:05 (none) pluto[28571]: "S_TestRoadWarrior_1"[2] 212.23.126.4:40: deleting connection "S_TestRoadWarrior_1" instance with peer 212.23.126.4
2004:07:14-16:29:05 (none) pluto[28571]: packet from 212.23.126.4:40: received and ignored informational message
Packet filter log:
2004:07:14-16:22:31 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=1 ID=34062 PROTO=UDP SPT=16490 DPT=33480 LEN=20
2004:07:14-16:22:36 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=1 ID=34063 PROTO=UDP SPT=16490 DPT=33481 LEN=20
2004:07:14-16:22:41 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=1 ID=34064 PROTO=UDP SPT=16490 DPT=33482 LEN=20
2004:07:14-16:22:46 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=2 ID=34065 PROTO=UDP SPT=16490 DPT=33483 LEN=20
2004:07:14-16:22:51 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=2 ID=34066 PROTO=UDP SPT=16490 DPT=33484 LEN=20
2004:07:14-16:22:56 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=2 ID=34067 PROTO=UDP SPT=16490 DPT=33485 LEN=20
2004:07:14-16:23:01 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=3 ID=34068 PROTO=UDP SPT=16490 DPT=33486 LEN=20
2004:07:14-16:23:06 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=3 ID=34069 PROTO=UDP SPT=16490 DPT=33487 LEN=20
2004:07:14-16:23:11 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=3 ID=34070 PROTO=UDP SPT=16490 DPT=33488 LEN=20
2004:07:14-16:23:16 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=4 ID=34071 PROTO=UDP SPT=16490 DPT=33489 LEN=20
2004:07:14-16:23:21 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=4 ID=34072 PROTO=UDP SPT=16490 DPT=33490 LEN=20
2004:07:14-16:23:26 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=4 ID=34073 PROTO=UDP SPT=16490 DPT=33491 LEN=20
2004:07:14-16:23:31 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=5 ID=34074 PROTO=UDP SPT=16490 DPT=33492 LEN=20
2004:07:14-16:23:36 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=5 ID=34075 PROTO=UDP SPT=16490 DPT=33493 LEN=20
2004:07:14-16:23:41 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=5 ID=34076 PROTO=UDP SPT=16490 DPT=33494 LEN=20
2004:07:14-16:23:46 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=6 ID=34077 PROTO=UDP SPT=16490 DPT=33495 LEN=20
2004:07:14-16:24:12 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=6 ID=34078 PROTO=UDP SPT=16490 DPT=33496 LEN=20
2004:07:14-16:24:12 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=6 ID=34079 PROTO=UDP SPT=16490 DPT=33497 LEN=20
2004:07:14-16:24:12 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=7 ID=34080 PROTO=UDP SPT=16490 DPT=33498 LEN=20
2004:07:14-16:24:12 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=7 ID=34081 PROTO=UDP SPT=16490 DPT=33499 LEN=20
2004:07:14-16:24:12 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=7 ID=34082 PROTO=UDP SPT=16490 DPT=33500 LEN=20
2004:07:14-16:24:16 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=8 ID=34083 PROTO=UDP SPT=16490 DPT=33501 LEN=20
2004:07:14-16:24:21 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=8 ID=34084 PROTO=UDP SPT=16490 DPT=33502 LEN=20
2004:07:14-16:24:26 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=8 ID=34085 PROTO=UDP SPT=16490 DPT=33503 LEN=20
2004:07:14-16:24:31 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=9 ID=34086 PROTO=UDP SPT=16490 DPT=33504 LEN=20
2004:07:14-16:24:36 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=9 ID=34087 PROTO=UDP SPT=16490 DPT=33505 LEN=20
2004:07:14-16:24:42 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=9 ID=34088 PROTO=UDP SPT=16490 DPT=33506 LEN=20
2004:07:14-16:24:46 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=10 ID=34089 PROTO=UDP SPT=16490 DPT=33507 LEN=20
2004:07:14-16:24:51 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=10 ID=34090 PROTO=UDP SPT=16490 DPT=33508 LEN=20
2004:07:14-16:24:56 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=10 ID=34091 PROTO=UDP SPT=16490 DPT=33509 LEN=20
2004:07:14-16:25:01 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=11 ID=34092 PROTO=UDP SPT=16490 DPT=33510 LEN=20
2004:07:14-16:25:06 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=11 ID=34093 PROTO=UDP SPT=16490 DPT=33511 LEN=20
2004:07:14-16:25:11 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=11 ID=34094 PROTO=UDP SPT=16490 DPT=33512 LEN=20
2004:07:14-16:25:16 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=12 ID=34095 PROTO=UDP SPT=16490 DPT=33513 LEN=20
2004:07:14-16:25:21 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=12 ID=34096 PROTO=UDP SPT=16490 DPT=33514 LEN=20
2004:07:14-16:25:48 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=12 ID=34097 PROTO=UDP SPT=16490 DPT=33515 LEN=20
2004:07:14-16:25:48 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=13 ID=34098 PROTO=UDP SPT=16490 DPT=33516 LEN=20
2004:07:14-16:25:48 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=13 ID=34099 PROTO=UDP SPT=16490 DPT=33517 LEN=20
2004:07:14-16:25:48 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=13 ID=34100 PROTO=UDP SPT=16490 DPT=33518 LEN=20
2004:07:14-16:25:48 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=14 ID=34101 PROTO=UDP SPT=16490 DPT=33519 LEN=20
2004:07:14-16:25:51 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=14 ID=34102 PROTO=UDP SPT=16490 DPT=33520 LEN=20
2004:07:14-16:25:56 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=14 ID=34103 PROTO=UDP SPT=16490 DPT=33521 LEN=20
2004:07:14-16:26:01 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=15 ID=34104 PROTO=UDP SPT=16490 DPT=33522 LEN=20
2004:07:14-16:26:06 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=15 ID=34105 PROTO=UDP SPT=16490 DPT=33523 LEN=20
2004:07:14-16:26:11 (none) kernel: DROP: IN=ppp0 OUT= MAC= SRC=212.23.126.4 DST=212.202.175.213 LEN=40 TOS=0x00 PREC=0x00 TTL=15 ID=34106 PROTO=UDP SPT=16490 DPT=33524 LEN=20
This thread was automatically locked due to age.
