Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 3 replies
  • Subscribers 1 subscriber
  • Views 1039 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

updated v4--v5 / VPN not working any more

seb-zrh
hi,

after upgrade of our main ASL to v5 VPN net2net to another ASL v4 won't work anymore. copied the new v5 RSA key to v4, but:

000 #17293: "S_dv_0" 0000 STATE_MAIN_I1 (sent MI1, expecting MR1); EVENT_RETRANSMIT in 16s
000 #17292: "D_roadwarriors_1"[1427] 0000  STATE_MAIN_R2 (sent MR2, expecting MI3); EVENT_RETRANSMIT in 11s
000 

:-(

any ideas?

thanks.

seb


This thread was automatically locked due to age.
Parents
  • 0
    Please post the logs and upgrade to the latest version  5.103. What about your configuration? Static, dynamic endpoints? How many tunnels?
    /bagira
  • 0 in reply to bagira
    all static endpoints.

    thanks!

    000  
    000 "zh_1": 192.168.168.0/24===xxxxxx[xxxx@xxxx]...xxxxxx[xxxx@xxxx]===192.168.3.0/24
    000 "zh_1":   CAs: '%any'...'%any'
    000 "zh_1":   ike_life: 7800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
    000 "zh_1":   policy: RSASIG+ENCRYPT+TUNNEL; interface: eth1; unrouted
    000 "zh_1":   newest ISAKMP SA: #0; newest IPsec SA: #0; eroute owner: #0
    000 "zh_1":   IKE algorithms wanted: 5_000-1-5, flags=-strict
    000 "zh_1":   IKE algorithms found:  5_192-1_128-5, 
    000 "zh_1":   ESP algorithms wanted: 3_000-1, flags=-strict
    000 "zh_1":   ESP algorithms loaded: 3_168-1_128, 
    000  
    000 #773: "zh_1" STATE_MAIN_I1 (sent MI1, expecting MR1); EVENT_RETRANSMIT in 0s
    000
  • 0 in reply to seb-zrh
    The logs please, not the VPN Status! ;-)
Reply Children
No Data
Cookie Information Banner