Hello,
I am trying to connect Astaro and a DFL-210 firewall.
Astaro is version: 7.305
- I have double checked:
* IPSEC and IKE algorithms and they are bot the same on both sides.
* We use the same DH group (Group 1 768-bit) on both sides.
* IP and gateway/network addresses are correct.
- I have the firewall DFL-210 alredy connected to several other firewalls, and there everything work fine.
- Just cant get the Astaro to connect the IPSEC tunnel.
- This is the error log on the Astaro:
I am getting the following error messages in the Astaro firwall log:
10:36:13 (none) pluto[14028]: "S_Nacka Centrum_0" #1: ignoring Vendor ID payload [12f5f28c457168a9702d9fe274cc]
2008:11:28-10:36:13 (none) pluto[14028]: "S_Nacka Centrum_0" #1: enabling possible NAT-traversal with method 3
2008:11:28-10:36:13 (none) pluto[14028]: "S_Nacka Centrum_0" #1: NAT-Traversal: Result using RFC 3947: no NAT detected
2008:11:28-10:36:13 (none) pluto[14028]: "S_Nacka Centrum_0" #1: Peer ID is ID_IPV4_ADDR: '213.88.128.91'
2008:11:28-10:36:13 (none) pluto[14028]: "S_Nacka Centrum_0" #1: ISAKMP SA established
2008:11:28-10:36:13 (none) pluto[14028]: "S_Nacka Centrum_0" #2: initiating Quick Mode PSK+ENCRYPT+TUNNEL+UP {using isakmp#1}
2008:11:28-10:36:13 (none) pluto[14028]: "S_Nacka Centrum_0" #1: received ModeCfg message when in state STATE_MAIN_I4, and we aren't mode config client
2008:11:28-10:36:14 (none) pluto[14028]: "S_Nacka Centrum_0" #1: received ModeCfg message when in state STATE_MAIN_I4, and we aren't mode config client
2008:11:28-10:36:15 (none) pluto[14028]: "S_Nacka Centrum_0" #1: received ModeCfg message when in state STATE_MAIN_I4, and we aren't mode config client
2008:11:28-10:36:17 (none) pluto[14028]: "S_Nacka Centrum_0" #1: received ModeCfg message when in state STATE_MAIN_I4, and we aren't mode config client
2008:11:28-10:36:21 (none) pluto[14028]: "S_Nacka Centrum_0" #1: received ModeCfg message when in state STATE_MAIN_I4, and we aren't mode config client
2008:11:28-10:36:29 (none) pluto[14028]: "S_Nacka Centrum_0" #1: received ModeCfg message when in state STATE_MAIN_I4, and we aren't mode config client
2008:11:28-10:36:45 (none) pluto[14028]: "S_Nacka Centrum_0" #1: received ModeCfg message when in state STATE_MAIN_I4, and we aren't mode config client
Thanks for any help on this,
Best regards,
Johan
This thread was automatically locked due to age.