Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Connecting a Raspi to UTM

Hello everyone,
I am having trouble connecting my Raspberry Pi as a remote client to my UTM.
I want the Pi to be configured to "call home" once it gets a web connection.

But I can't get the tunnel up.

UTM-IPSec Log
2013:10:08-15:39:50  pluto[6033]: packet from :500: received Vendor ID payload [RFC 3947]

2013:10:08-15:39:50  pluto[6033]: packet from :500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
2013:10:08-15:39:50  pluto[6033]: packet from :500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2013:10:08-15:39:50  pluto[6033]: packet from :500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02]
2013:10:08-15:39:50  pluto[6033]: packet from :500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
2013:10:08-15:39:50  pluto[6033]: "L_REF_IpsL2t1"[28]  #587: responding to Main Mode from unknown peer 
2013:10:08-15:39:50  pluto[6033]: packet from :500: ignoring informational payload, type NO_PROPOSAL_CHOSEN
2013:10:08-15:40:00  pluto[6033]: packet from :500: ignoring informational payload, type NO_PROPOSAL_CHOSEN
2013:10:08-15:41:00  pluto[6033]: "L_REF_IpsL2t1"[28]  #587: max number of retransmissions (2) reached STATE_MAIN_R1
2013:10:08-15:41:00  pluto[6033]: "L_REF_IpsL2t1"[28] : deleting connection "L_REF_IpsL2t1"[28] instance with peer  {isakmp=#0/ipsec=#0} 


This is what my Pi's console says:
104 "L2TP-PSK" #4: STATE_MAIN_I1: initiate

010 "L2TP-PSK" #4: STATE_MAIN_I1: retransmission; will wait 20s for response
010 "L2TP-PSK" #4: STATE_MAIN_I1: retransmission; will wait 40s for response
031 "L2TP-PSK" #4: max number of retransmissions (2) reached STATE_MAIN_I1.  No response (or no acceptable response) to our first IKE message
000 "L2TP-PSK" #4: starting keying attempt 2 of at most 3, but releasing whack


Configuration will follow in another post in a second


This thread was automatically locked due to age.
Parents
  • Just to be clear, this is not an IPsec client - it's an L2TP/IPsec client.  Nonetheless, it appears that you are correct that the issue is that IPsec never gets a tunnel established.  Is the UTM that your Pi is calling behind a NATting router?  Are you certain that both sides have the same PSK?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Just to be clear, this is not an IPsec client - it's an L2TP/IPsec client.  Nonetheless, it appears that you are correct that the issue is that IPsec never gets a tunnel established.  Is the UTM that your Pi is calling behind a NATting router?  Are you certain that both sides have the same PSK?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?