This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

What does this mean?

Hello,

in my IPSec Log i get the following messages.
2006:07:11-16:36:48 (none) pluto[6746]: "S_VPN__X509__XXX__XXXX_0" #15: ERROR: asynchronous network error report on eth2 (sport=500) for message to 218.XX.XXX.XXX port 500, complainant 218.XX.XXX.XXX: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)

The IPSec Tunnels doesn't come up. After a reboot of the maschine and a few minutes everthing ist back.

Any suggestions? Thanks!

Regards, Mario

This thread was automatically locked due to age.

Parents

0 NimmdirKeks over 19 years ago

This error will be triggered for example, if the packets are larger then the MTU of the interface. What key size did you use?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 NimmdirKeks over 19 years ago

This error will be triggered for example, if the packets are larger then the MTU of the interface. What key size did you use?
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 quasar3c279 over 19 years ago in reply to NimmdirKeks

I used 2048bits. Could this be the reason, why it takes so long until the tunnels come up again? normally it should take a few seconds but in this case it needs 10 to 15 minutes or longer!

Thanks!
Cancel
Vote Up 0 Vote Down

Cancel
0 NimmdirKeks over 19 years ago in reply to quasar3c279

Try it with 1024 for the X509 keylength.
Cancel
Vote Up 0 Vote Down

Cancel

0 cotto over 18 years ago in reply to NimmdirKeks

same problem here. trying to build a IPsec-vpn via PSK between 2 asl 7.005.
vpn came up yesterday after 30min for about 5min.

one asl tells me:

[FONT=monospace]2007:07:26-13:45:12 (none) pluto[30223]: ERROR: asynchronous network error report on ppp0 for message to *.*.99.10 port 500, complainant *.*.99.10: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)][/FONT]

the other asl says:

[FONT=monospace]2007:07:26-02:02:17 (none) pluto[7807]: ERROR: "S_hws-vpn_0" #1: sendto on eth1 to *.*.36.58:500 failed in main_outI1. Errno 1: Operation not permitted [/FONT]
[FONT=monospace]2007:07:26-02:02:27 (none) pluto[7807]: ERROR: "S_hws-vpn_0" #1: sendto on eth1 to *.*.36.58:500 failed in EVENT_RETRANSMIT. Errno 1: Operation not permitted [/FONT]
[FONT=monospace]2007:07:26-02:02:47 (none) pluto[7807]: ERROR: "S_hws-vpn_0" #1: sendto on eth1 to *.*.36.58:500 failed in EVENT_RETRANSMIT. Errno 1: Operation not permitted [/FONT]
[FONT=monospace]2007:07:26-02:15:27 (none) pluto[7807]: "S_hws-vpn_0" #1: max number of retransmissions (20) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message [/FONT]
[FONT=monospace]2007:07:26-02:15:27 (none) pluto[7807]: "S_hws-vpn_0" #1: starting keying attempt 2 of an unlimited number [/FONT]
[FONT=monospace]2007:07:26-02:15:27 (none) pluto[7807]: "S_hws-vpn_0" #2: initiating Main Mode to replace #1 [/FONT]
[FONT=monospace]2007:07:26-02:28:37 (none) pluto[7807]: "S_hws-vpn_0" #2: max number of retransmissions (20) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message [/FONT]
[FONT=monospace]2007:07:26-02:28:37 (none) pluto[7807]: "S_hws-vpn_0" #2: starting keying attempt 3 of an unlimited number [/FONT]
[FONT=monospace]2007:07:26-02:28:37 (none) pluto[7807]: "S_hws-vpn_0" #3: initiating Main Mode to replace #2 [/FONT]

whats going on there?