Hi Guys
I'd be appreciate if someone help me with this crazy (yet should be well easy) IPSec Tunnel between two FWs. I followed this dude's vlog, but i got no luck yet..
This is what I see from IPSEC VPN* log from Webadmin portal of UTM9 ...
Office1" #320503: max number of retransmissions (2) reached STATE_MAIN_I2
2017:11:14-08:53:55 89 pluto[5611]: "Office1" #320503: starting keying attempt 2 of an unlimited number
2017:11:14-08:53:55 89 pluto[5611]: "Office1" #320506: initiating Main Mode to replace #320503
2017:11:14-08:53:55 89 pluto[5611]: "Office1" #320506: received Vendor ID payload [XAUTH]
2017:11:14-08:53:55 89 pluto[5611]: "Office1" #320506: received Vendor ID payload [Dead Peer Detection]
2017:11:14-08:53:55 89 pluto[5611]: "Office1" #320506: received Vendor ID payload [RFC 3947]
2017:11:14-08:53:55 89 pluto[5611]: "Office1" #320506: enabling possible NAT-traversal with method 3
2017:11:14-08:53:55 89 pluto[5611]: "Office1" #320506: Informational Exchange message must be encrypted
2017:11:14-08:53:55 89 pluto[5611]: "Office1" #320503: starting keying attempt 2 of an unlimited number
2017:11:14-08:53:55 89 pluto[5611]: "Office1" #320506: initiating Main Mode to replace #320503
2017:11:14-08:53:55 89 pluto[5611]: "Office1" #320506: received Vendor ID payload [XAUTH]
2017:11:14-08:53:55 89 pluto[5611]: "Office1" #320506: received Vendor ID payload [Dead Peer Detection]
2017:11:14-08:53:55 89 pluto[5611]: "Office1" #320506: received Vendor ID payload [RFC 3947]
2017:11:14-08:53:55 89 pluto[5611]: "Office1" #320506: enabling possible NAT-traversal with method 3
2017:11:14-08:53:55 89 pluto[5611]: "Office1" #320506: Informational Exchange message must be encrypted
I have other 3 active IPSec tunnels which are between other UTMs. On PFsense i have another 3 active mainly from AWS VPN.
From the pfsense this is what i see
ov 14 08:17:42 charon 11[IKE] <con8000|1055> initiating Main Mode IKE_SA con8000[1055] to 10.254.254.126
Nov 14 08:17:42 charon 11[ENC] <con8000|1055> generating ID_PROT request 0 [ SA V V V V V ]
Nov 14 08:17:42 charon 11[NET] <con8000|1055> sending packet: from 77.75.101.166[500] to 10.254.254.126[500] (180 bytes)
Nov 14 08:17:42 charon 11[ENC] <con8000|1055> generating ID_PROT request 0 [ SA V V V V V ]
Nov 14 08:17:42 charon 11[NET] <con8000|1055> sending packet: from 77.75.101.166[500] to 10.254.254.126[500] (180 bytes)
PFSense is on Connecting mode and then disconnects..
This thread was automatically locked due to age.
