Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 5696 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Fix error site to site

phanhotri
Dear all,

I want to connect site to site but can't and this is my log

------------------------* Site 1 *--------------------------

pluto[5669]: loading secrets from "/etc/ipsec.secrets" 
pluto[5669]: loaded shared key for 116.118.x.x 113.161.x.x
 
pluto[5669]: added connection description "S_VPN to Q7" 

pluto[5669]: "S_VPN to Q7" #1: initiating Main Mode 

pluto[5669]: shutting down 

pluto[5669]: forgetting secrets 

pluto[5669]: "S_VPN to Q7": deleting connection 

pluto[5669]: "S_VPN to Q7" #1: deleting state (STATE_MAIN_I1)
 
pluto[5669]: shutting down interface ipsec0/ppp0 113.161.x.x
 
pluto[5669]: shutting down interface ipsec0/ppp0 113.161.x.x 


------------------------* Site 2 *--------------------------


pluto[7708]: adding interface lo/lo 127.0.0.1:500
pluto[7708]: adding interface lo/lo 127.0.0.1:4500
pluto[7708]: adding interface lo/lo ::1:500
pluto[7708]: loading secrets from "/etc/ipsec.secrets"
pluto[7708]: loaded PSK secret for 116.118.x.x 113.161.x.x
pluto[7708]: added connection description "S_VPN to Cu Chi"
pluto[7708]: "S_VPN to Cu Chi" #1: initiating Main Mode
pluto[7708]: "S_VPN to Cu Chi" #1: max number of retransmissions (20) reached STATE_MAIN_I1. No response (or no acceptable response) to our first IKE message
pluto[7708]: "S_VPN to Cu Chi" #1: starting keying attempt 2 of an unlimited number
pluto[7708]: "S_VPN to Cu Chi" #2: initiating Main Mode to replace #1

Thanks for reading my problem !!!


This thread was automatically locked due to age.
Parents
  • 0
    As Ben says, in order to diagnose the problem, we would need to see the IPsec log lines from both sides for a single connection attempt (about 60 lines each).  Are you certain that neither endpoint is behind a router doing NAT?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • 0
    As Ben says, in order to diagnose the problem, we would need to see the IPsec log lines from both sides for a single connection attempt (about 60 lines each).  Are you certain that neither endpoint is behind a router doing NAT?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Unfiltered HTML