ASL 5.103.
On the client side, I get "Error 789:
The L2TP connection attempt failed because the security layer encoungered a processing error during the initial negotiations witht he remote computer."
Some other times I get "Error 792: The L2TP connection attempt failed because security negotiation timed out."
I have pretty thoroughly searched the forum. Oddly, I get that same Error 789 even when Asatro is rebooting. So it doesn't seem to be server-side. I'm using a laptop running WinXP SP2 with all the current security updates.
Here's a log:
Code:
2005:02:26-08:47:41 (none) ipsec_starter[16921]: Reloading config...
2005:02:26-08:47:41 (none) pluto[16934]: forgetting secrets
2005:02:26-08:47:41 (none) pluto[16934]: loading secrets from "/etc/ipsec.secrets"
2005:02:26-08:47:41 (none) pluto[16934]: OpenPGP certificate file '/etc/pgpcert.pgp' not found
2005:02:26-08:47:41 (none) pluto[16934]: Changing to directory '/etc/ipsec.d/cacerts'
2005:02:26-08:47:41 (none) pluto[16934]: Warning: empty directory
2005:02:26-08:47:41 (none) pluto[16934]: Changing to directory '/etc/ipsec.d/crls'
2005:02:26-08:47:41 (none) pluto[16934]: Warning: empty directory
2005:02:26-08:47:41 (none) pluto[16934]: shutting down
2005:02:26-08:47:41 (none) pluto[16934]: forgetting secrets
2005:02:26-08:47:41 (none) pluto[16934]: "S_maastricht__l2tp_1" 0.0.0.0: deleting connection
2005:02:26-08:47:42 (none) pluto[16934]: "S_maastricht__l2tp_0" 0.0.0.0: deleting connection
2005:02:26-08:47:42 (none) pluto[16934]: shutting down interface ipsec0/eth1 12.214.38.195
2005:02:26-08:47:42 (none) pluto[16934]: shutting down interface ipsec0/eth1 12.214.38.195
2005:02:26-08:47:42 (none) ipsec_starter[16921]: child 16934 (Pluto) has quit (exit code 0)
2005:02:26-08:47:42 (none) ipsec_starter[16921]: Reloading all secrets...
2005:02:26-08:47:42 (none) ipsec_starter[16921]: connect(pluto_ctl) failed: No such file or directory
2005:02:26-08:47:42 (none) ipsec_starter[16921]: Attempting to start pluto...
2005:02:26-08:47:43 (none) ipsec_starter[16921]: pluto (1086) started
2005:02:26-08:47:43 (none) pluto[1086]: Starting Pluto (Openswan Version 1.0.2b)
2005:02:26-08:47:43 (none) pluto[1086]: including X.509 patch with traffic selectors (Version 0.9.39b)
2005:02:26-08:47:43 (none) pluto[1086]: including NAT-Traversal patch (Version 0.6)
2005:02:26-08:47:43 (none) pluto[1086]: | inserting event EVENT_REINIT_SECRET, timeout in 3600 seconds
2005:02:26-08:47:43 (none) pluto[1086]: ike_alg_register_enc(): Activating OAKLEY_DES_CBC: Ok (ret=0)
2005:02:26-08:47:43 (none) pluto[1086]: ike_alg_register_enc(): Activating OAKLEY_AES_CBC: Ok (ret=0)
2005:02:26-08:47:43 (none) pluto[1086]: ike_alg_register_enc(): Activating OAKLEY_BLOWFISH_CBC: Ok (ret=0)
2005:02:26-08:47:43 (none) pluto[1086]: ike_alg_register_enc(): Activating OAKLEY_CAST_CBC: Ok (ret=0)
2005:02:26-08:47:43 (none) pluto[1086]: ike_alg_register_enc(): Activating OAKLEY_SERPENT_CBC: Ok (ret=0)
2005:02:26-08:47:43 (none) pluto[1086]: ike_alg_register_hash(): Activating OAKLEY_SHA2_256: Ok (ret=0)
2005:02:26-08:47:43 (none) pluto[1086]: ike_alg_register_hash(): Activating OAKLEY_SHA2_512: Ok (ret=0)
2005:02:26-08:47:43 (none) pluto[1086]: ike_alg_register_enc(): Activating OAKLEY_TWOFISH_CBC: Ok (ret=0)
2005:02:26-08:47:43 (none) pluto[1086]: ike_alg_register_enc(): Activating OAKLEY_SSH_PRIVATE_65289: Ok (ret=0)
2005:02:26-08:47:43 (none) pluto[1086]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2005:02:26-08:47:43 (none) pluto[1086]: Changing to directory '/etc/ipsec.d/cacerts'
2005:02:26-08:47:43 (none) pluto[1086]: Warning: empty directory
2005:02:26-08:47:43 (none) pluto[1086]: Changing to directory '/etc/ipsec.d/crls'
2005:02:26-08:47:43 (none) pluto[1086]: Warning: empty directory
2005:02:26-08:47:43 (none) pluto[1086]: OpenPGP certificate file '/etc/pgpcert.pgp' not found
2005:02:26-08:47:43 (none) pluto[1086]: | next event EVENT_SHUNT_SCAN in 120 seconds
2005:02:26-08:47:43 (none) pluto[1086]: |
2005:02:26-08:47:43 (none) pluto[1086]: | *received whack message
2005:02:26-08:47:43 (none) pluto[1086]: listening for IKE messages
2005:02:26-08:47:43 (none) pluto[1086]: | found lo with address 127.0.0.1
2005:02:26-08:47:43 (none) pluto[1086]: | found eth0 with address 10.10.10.1
2005:02:26-08:47:43 (none) pluto[1086]: | found eth1 with address 12.214.38.195
2005:02:26-08:47:43 (none) pluto[1086]: | found eth1 with address 12.214.38.66
2005:02:26-08:47:43 (none) pluto[1086]: | found ipsec0 with address 12.214.38.195
2005:02:26-08:47:43 (none) pluto[1086]: | IP interface eth1 12.214.38.66 has no matching ipsec* interface -- ignored
2005:02:26-08:47:43 (none) pluto[1086]: adding interface ipsec0/eth1 12.214.38.195
2005:02:26-08:47:43 (none) pluto[1086]: adding interface ipsec0/eth1 12.214.38.195:4500
2005:02:26-08:47:43 (none) pluto[1086]: | IP interface eth0 10.10.10.1 has no matching ipsec* interface -- ignored
2005:02:26-08:47:43 (none) pluto[1086]: | IP interface lo 127.0.0.1 has no matching ipsec* interface -- ignored
2005:02:26-08:47:43 (none) pluto[1086]: | could not open /proc/net/if_inet6
2005:02:26-08:47:43 (none) pluto[1086]: loading secrets from "/etc/ipsec.secrets"
2005:02:26-08:47:43 (none) pluto[1086]: | next event EVENT_SHUNT_SCAN in 120 seconds
2005:02:26-08:47:43 (none) pluto[1086]: |
2005:02:26-08:47:43 (none) pluto[1086]: | *received whack message
2005:02:26-08:47:43 (none) pluto[1086]: | from whack: got --esp=3des-md5
2005:02:26-08:47:43 (none) pluto[1086]: | esp string values: 3_000-1, flags=-strict
2005:02:26-08:47:43 (none) pluto[1086]: | from whack: got --ike=3des-sha-modp2048
2005:02:26-08:47:43 (none) pluto[1086]: | ike string values: 5_000-2-14, flags=-strict
2005:02:26-08:47:43 (none) pluto[1086]: added connection description "S_maastricht__l2tp_0"
2005:02:26-08:47:43 (none) pluto[1086]: | 12.214.38.195:17/1701...%any:17/%any==={0.0.0.0/0}
2005:02:26-08:47:43 (none) pluto[1086]: | ike_life: 28800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3; policy: PSK+ENCRYPT
2005:02:26-08:47:43 (none) pluto[1086]: | next event EVENT_SHUNT_SCAN in 120 seconds
2005:02:26-08:47:43 (none) pluto[1086]: |
2005:02:26-08:47:43 (none) pluto[1086]: | *received whack message
2005:02:26-08:47:43 (none) pluto[1086]: | from whack: got --esp=3des-md5
2005:02:26-08:47:43 (none) pluto[1086]: | esp string values: 3_000-1, flags=-strict
2005:02:26-08:47:43 (none) pluto[1086]: | from whack: got --ike=3des-sha-modp2048
2005:02:26-08:47:43 (none) pluto[1086]: | ike string values: 5_000-2-14, flags=-strict
2005:02:26-08:47:43 (none) pluto[1086]: added connection description "S_maastricht__l2tp_1"
2005:02:26-08:47:43 (none) pluto[1086]: | 12.214.38.195:17/0...%any:17/%any==={0.0.0.0/0}
2005:02:26-08:47:43 (none) pluto[1086]: | ike_life: 28800s; ipsec_life: 3600s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 3; policy: PSK+ENCRYPT
2005:02:26-08:47:43 (none) pluto[1086]: | next event EVENT_SHUNT_SCAN in 120 seconds
2005:02:26-08:48:38 (none) pluto[1086]: |
2005:02:26-08:48:38 (none) pluto[1086]: | *received whack message
2005:02:26-08:48:38 (none) pluto[1086]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2005:02:26-08:48:38 (none) pluto[1086]: | kernel_alg_esp_auth_keylen(auth=1, sadb_aalg=2): a_keylen=16
2005:02:26-08:48:38 (none) pluto[1086]: | next event EVENT_SHUNT_SCAN in 65 seconds
2005:02:26-08:49:43 (none) pluto[1086]: |
2005:02:26-08:49:43 (none) pluto[1086]: | *time to handle event
2005:02:26-08:49:43 (none) pluto[1086]: | event after this is EVENT_REINIT_SECRET in 3480 seconds
2005:02:26-08:49:43 (none) pluto[1086]: | inserting event EVENT_SHUNT_SCAN, timeout in 120 seconds
2005:02:26-08:49:43 (none) pluto[1086]: | scanning for shunt eroutes
2005:02:26-08:49:43 (none) pluto[1086]: | next event EVENT_SHUNT_SCAN in 120 seconds
I'm sure I'm making some idiotic mistake, but I can't figure out what it is. Hopefully someone one stop removed can see it. Thanks.
This thread was automatically locked due to age.
