Hello,
I'm trying to get remote access via IPSec (Not L2TP over IPSec) setup and working. To my knowledge I have everything configured the way it should be but I'm getting Errors when the client tries to connect. I'm getting the same error on my WinXp and Win7 machines
ASG320 -v7.501
Here is the Log from the Client:
11/10/2009 9:39:35 AM IPSec: Start building connection
11/10/2009 9:39:35 AM Ike: phase1:name(ASG-Studio) - outgoing connect request - main mode.
11/10/2009 9:39:35 AM Ike: XMIT_MSG1_MAIN - ASG-Studio
11/10/2009 9:39:35 AM Ike: RECV_MSG2_MAIN - ASG-Studio
11/10/2009 9:39:35 AM IPSec: Final Tunnel EndPoint is:***.***.122.173
11/10/2009 9:39:35 AM Ike: IKE phase I: Setting LifeTime to 28800 seconds
11/10/2009 9:39:35 AM Ike: IkeSa negotiated with the following properties -
11/10/2009 9:39:35 AM Authentication=RSA_SIGNATURES,Encryption=AES,Hash=SHA,DHGroup=5,KeyLen=256
11/10/2009 9:39:35 AM Ike: ASG-Studio ->Support for NAT-T version - 9
11/10/2009 9:39:35 AM Ike: XMIT_MSG3_MAIN - ASG-Studio
11/10/2009 9:39:35 AM Ike: RECV_MSG4_MAIN - ASG-Studio
11/10/2009 9:39:35 AM Ike: Turning on NATD mode - ASG-Studio - 1
11/10/2009 9:39:35 AM Ike: XMIT_MSG5_MAIN - ASG-Studio
11/10/2009 9:39:35 AM Ike: XMIT_MSG5_MAIN_RESUME - ASG-Studio
11/10/2009 9:39:35 AM Ike: RECV_MSG6_MAIN - ASG-Studio
11/10/2009 9:39:35 AM Ike: RECV_MSG6_MAIN_RESUME - ASG-Studio
11/10/2009 9:39:35 AM Ike: IkeSa negotiated with the following properties -
11/10/2009 9:39:35 AM Authentication=RSA_SIGNATURES,Encryption=AES,Hash=SHA,DHGroup=5,KeyLen=256
11/10/2009 9:39:35 AM Ike: Turning on DPD mode - ASG-Studio
11/10/2009 9:39:35 AM Ike: phase1:name(ASG-Studio) - connected
11/10/2009 9:39:35 AM SUCCESS: IKE phase 1 ready
11/10/2009 9:39:35 AM IPSec: Phase1 is Ready - IkeIndex=10
11/10/2009 9:39:35 AM IPSec: Quick Mode is Ready: IkeIndex = 0000000a , VpnSrcPort = 4500
11/10/2009 9:39:35 AM IkeQuick: XMIT_MSG1_QUICK - ASG-Studio
11/10/2009 9:39:35 AM Ike: NOTIFY : ASG-Studio : RECEIVED : INVALID_ID_INFORMATION : 18
11/10/2009 9:39:40 AM Ike: NOTIFY : ASG-Studio : RECEIVED : INVALID_MESSAGE_ID : 9
11/10/2009 9:39:43 AM Ike: NOTIFY : ASG-Studio : RECEIVED : INVALID_MESSAGE_ID : 9
11/10/2009 9:39:46 AM Ike: NOTIFY : ASG-Studio : RECEIVED : INVALID_MESSAGE_ID : 9
11/10/2009 9:39:49 AM IkeQuick: phase2:name(ASG-Studio) - error - retry timeout - max retries
11/10/2009 9:39:49 AM ERROR - 4037: IKE(phase2):Waiting for message2, retry timeout - max retries - ASG-Studio.
11/10/2009 9:39:49 AM IPSec: Disconnected from ASG-Studio on channel 1.
I have the system in a "lab" with Public IP's right now but I need to get it Live in the next few days. Anyone have and Idea for me? Thanks for the help.
This thread was automatically locked due to age.
