Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 4092 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Connecting a Raspi to UTM

IngoPohlschneider
Hello everyone,
I am having trouble connecting my Raspberry Pi as a remote client to my UTM.
I want the Pi to be configured to "call home" once it gets a web connection.

But I can't get the tunnel up.

UTM-IPSec Log 
2013:10:08-15:39:50  pluto[6033]: packet from :500: received Vendor ID payload [RFC 3947]

2013:10:08-15:39:50  pluto[6033]: packet from :500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]

2013:10:08-15:39:50  pluto[6033]: packet from :500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]

2013:10:08-15:39:50  pluto[6033]: packet from :500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]

2013:10:08-15:39:50  pluto[6033]: packet from :500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]

2013:10:08-15:39:50  pluto[6033]: "L_REF_IpsL2t1"[28]  #587: responding to Main Mode from unknown peer 

2013:10:08-15:39:50  pluto[6033]: packet from :500: ignoring informational payload, type NO_PROPOSAL_CHOSEN

2013:10:08-15:40:00  pluto[6033]: packet from :500: ignoring informational payload, type NO_PROPOSAL_CHOSEN

2013:10:08-15:41:00  pluto[6033]: "L_REF_IpsL2t1"[28]  #587: max number of retransmissions (2) reached STATE_MAIN_R1

2013:10:08-15:41:00  pluto[6033]: "L_REF_IpsL2t1"[28] : deleting connection "L_REF_IpsL2t1"[28] instance with peer  {isakmp=#0/ipsec=#0} 


This is what my Pi's console says: 
104 "L2TP-PSK" #4: STATE_MAIN_I1: initiate

010 "L2TP-PSK" #4: STATE_MAIN_I1: retransmission; will wait 20s for response

010 "L2TP-PSK" #4: STATE_MAIN_I1: retransmission; will wait 40s for response

031 "L2TP-PSK" #4: max number of retransmissions (2) reached STATE_MAIN_I1.  No response (or no acceptable response) to our first IKE message

000 "L2TP-PSK" #4: starting keying attempt 2 of at most 3, but releasing whack


Configuration will follow in another post in a second


This thread was automatically locked due to age.
Parents
  • 0
    What router do you use? I assume the raspi side has a home router instead of an UTM?

    Many (cheap) routers have weak firmwares, resulting in many IPSec routing issues. Have you tried removing the router and attaching the raspi directly to the modem? Sometimes also a DMZ gives IPSec issues, I expierenced the same.
Reply
  • 0
    What router do you use? I assume the raspi side has a home router instead of an UTM?

    Many (cheap) routers have weak firmwares, resulting in many IPSec routing issues. Have you tried removing the router and attaching the raspi directly to the modem? Sometimes also a DMZ gives IPSec issues, I expierenced the same.
Children
No Data