Hi,

Thanks for the response I had managed to fix the first problem, I know have a problem with establishing the tunnel, I have included a snippet from isakmpd. I hope you can shed some light on this problem I am having.

Thanks in advance
Adrian

205846.837756 Cryp 80 ipsec_get_keystate: final phase 1 IV:
205846.838262 Cryp 80 15510390 ddce0029
205846.838546 Cryp 80 ipsec_get_keystate: message ID:
205846.838849 Cryp 80 367be425
205846.839154 Cryp 50 crypto_update_iv: initialized IV:
205846.839500 Cryp 50 14feb9a3 859cfb89
205846.841260 Cryp 80 ipsec_get_keystate: phase 2 IV:
205846.841601 Cryp 80 14feb9a3 859cfb89
205846.841888 Cryp 10 crypto_decrypt: before decryption:
205846.842343 Cryp 10 8efe4b1e d53c1d30 6de65351 5b471288 a54aec52 c894e564 fbe88299 0fc28f7a
205846.842806 Cryp 10 2e2a5127 24613ce5 1d5b20a6 2f0d7053 349e15b5 b001ff44 9585f204 390a28b1
205846.845056 Cryp 10 9448f740 3ec68e41 63d4a8e3 54c26426 dab8a8d6 0ea819b9 7c423131 cb6727dc
205846.845593 Cryp 30 crypto_decrypt: after decryption:
205846.846071 Cryp 30 0b000014 7722484b 83b973d2 d8881977 328a5c2f 00000044 00000001 0004000e
205846.846545 Cryp 30 00000000 0a000034 00000001 00000001 80865bc8 01000014 8123a37c 00000000
205846.848698 Cryp 30 8123a37c 8111b338 80865e74 01000000 1f68d09a 80e18db0 00000000 00000000
205846.849023 Mesg 50 message_parse_payloads: offset 0x1c payload HASH
205846.849338 Mesg 50 message_parse_payloads: offset 0x30 payload NOTIFY
205846.849661 Mesg 60 message_validate_payloads: payload HASH at 0xee51c of message 0xf6000
205846.851611 Mesg 60 message_validate_payloads: payload NOTIFY at 0xee530 of message 0xf6000
205846.851937 Mesg 70 DOI: IPSEC
205846.852400 Mesg 70 PROTO: <Unknown 0>
205846.852703 Mesg 70 SPI_SZ: 4
205846.853000 Mesg 70 MSG_TYPE: NO_PROPOSAL_CHOSEN
205846.854699 Misc 60 conf_get_str: [General]:Exchange-max-time->120
205846.855075 Timr 10 timer_add_event: event exchange_free_aux(0xf6200) added before cookie_reset_event(0x0), expiration in 120s
205846.855427 Exch 10 exchange_setup_p2: 0xf6200 <unnamed> <no policy> policy responder phase 2 doi 1 exchange 5 step 0
205846.857359 Exch 10 exchange_setup_p2: icookie 76b0bf8e3504818c rcookie 698145c9c4489858
205846.857681 Exch 10 exchange_setup_p2: msgid 367be425 sa_list
205846.858121 Default message_validate_notify: protocol not supported
205846.858412 Mesg 20 message_free: freeing 0xf6000
205846.860152 Trpt 70 transport_release: freeing 0xee480
205853.704950 Timr 10 timer_handle_expirations: event message_send(0xecd00)
205853.705326 Mesg 70 message_send: message 0xecd00
205853.705687 Mesg 70 ICOOKIE: 0x76b0bf8e3504818c
205853.706051 Mesg 70 RCOOKIE: 0x698145c9c4489858
205853.706357 Mesg 70 NEXT_PAYLOAD: HASH
205853.708211 Mesg 70 VERSION: 16
205853.708522 Mesg 70 EXCH_TYPE: QUICK_MODE
205853.708833 Mesg 70 FLAGS: [ ENC ]
205853.709151 Mesg 70 MESSAGE_ID: 0x1f68d09a
205853.709458 Mesg 70 LENGTH: 252
205853.709938 Mesg 70 message_send: 76b0bf8e 3504818c 698145c9 c4489858 08102001 1f68d09a 000000fc 1dcd9a76
205853.711970 Mesg 70 message_send: 53403cd9 9bdd1b25 dd1618a3 873852a6 2e16c755 a6fcd29b 3f269298 2743636e
205853.712628 Mesg 70 message_send: 78a078e0 9696c3a5 5ae1473d cbb027dc 61c0f96b 2487cf48 9add6327 b359e2f7
205853.713122 Mesg 70 message_send: 8141ffc1 4e4d95f9 c28a27da c48f32e4 a920587f 8d253892 aa57de6b 5bf86df4
205853.715234 Mesg 70 message_send: 1c34a873 8ad52baf 3acac26f 7208efbe 7e6f7d8e 9bd34e58 ccdb2e35 3929858b
205853.715729 Mesg 70 message_send: e5c3c2e5 9a579e81 b6239499 11da1eb0 57181e2f 431fa6d2 24176891 601d629a
205853.716211 Mesg 70 message_send: 9925f86d dbf631c6 a17df944 856f5806 83427764 d7280c0c 44052aa0 558e5574
205853.718294 Mesg 70 message_send: bbcef951 60528fc7 2c82a91b a07c67cb cd35d7d5 cfb76751 38029c84
205853.719587 Misc 60 conf_get_str: [General]:retransmits->5
205853.719933 Trpt 30 transport_send_messages: message 0xecd00 scheduled for retransmission 2 in 9 secs
205853.721683 Timr 10 timer_add_event: event message_send(0xecd00) added before connection_checker(0xf1910), expiration in 9s
205902.724938 Timr 10 timer_handle_expirations: event message_send(0xecd00)
205902.725288 Mesg 70 message_send: message 0xecd00
205902.725644 Mesg 70 ICOOKIE: 0x76b0bf8e3504818c
205902.725990 Mesg 70 RCOOKIE: 0x698145c9c4489858
205902.726294 Mesg 70 NEXT_PAYLOAD: HASH
205902.728596 Mesg 70 VERSION: 16
205902.728908 Mesg 70 EXCH_TYPE: QUICK_MODE
205902.729236 Mesg 70 FLAGS: [ ENC ]
205902.729554 Mesg 70 MESSAGE_ID: 0x1f68d09a
205902.729860 Mesg 70 LENGTH: 252
205902.730339 Mesg 70 message_send: 76b0bf8e 3504818c 698145c9 c4489858 08102001 1f68d09a 000000fc 1dcd9a76
205902.732370 Mesg 70 message_send: 53403cd9 9bdd1b25 dd1618a3 873852a6 2e16c755 a6fcd29b 3f269298 2743636e
205902.733011 Mesg 70 message_send: 78a078e0 9696c3a5 5ae1473d cbb027dc 61c0f96b 2487cf48 9add6327 b359e2f7
205902.733503 Mesg 70 message_send: 8141ffc1 4e4d95f9 c28a27da c48f32e4 a920587f 8d253892 aa57de6b 5bf86df4
205902.735609 Mesg 70 message_send: 1c34a873 8ad52baf 3acac26f 7208efbe 7e6f7d8e 9bd34e58 ccdb2e35 3929858b
205902.736105 Mesg 70 message_send: e5c3c2e5 9a579e81 b6239499 11da1eb0 57181e2f 431fa6d2 24176891 601d629a
205902.736587 Mesg 70 message_send: 9925f86d dbf631c6 a17df944 856f5806 83427764 d7280c0c 44052aa0 558e5574
205902.738685 Mesg 70 message_send: bbcef951 60528fc7 2c82a91b a07c67cb cd35d7d5 cfb76751 38029c84
205902.739996 Misc 60 conf_get_str: [General]:retransmits->5
205902.740343 Trpt 30 transport_send_messages: message 0xecd00 scheduled for retransmission 3 in 11 secs
205902.742081 Timr 10 timer_add_event: event message_send(0xecd00) added before connection_checker(0xf1910), expiration in 11s
205913.744941 Timr 10 timer_handle_expirations: event message_send(0xecd00)
205913.745289 Mesg 70 message_send: message 0xecd00
205913.745643 Mesg 70 ICOOKIE: 0x76b0bf8e3504818c
205913.745989 Mesg 70 RCOOKIE: 0x698145c9c4489858
205913.746293 Mesg 70 NEXT_PAYLOAD: HASH
205913.748101 Mesg 70 VERSION: 16
205913.748413 Mesg 70 EXCH_TYPE: QUICK_MODE
205913.748722 Mesg 70 FLAGS: [ ENC ]
205913.749041 Mesg 70 MESSAGE_ID: 0x1f68d09a
205913.749348 Mesg 70 LENGTH: 252
205913.749826 Mesg 70 message_send: 76b0bf8e 3504818c 698145c9 c4489858 08102001 1f68d09a 000000fc 1dcd9a76
205913.751868 Mesg 70 message_send: 53403cd9 9bdd1b25 dd1618a3 873852a6 2e16c755 a6fcd29b 3f269298 2743636e
205913.752510 Mesg 70 message_send: 78a078e0 9696c3a5 5ae1473d cbb027dc 61c0f96b 2487cf48 9add6327 b359e2f7
205913.753000 Mesg 70 message_send: 8141ffc1 4e4d95f9 c28a27da c48f32e4 a920587f 8d253892 aa57de6b 5bf86df4
205913.755105 Mesg 70 message_send: 1c34a873 8ad52baf 3acac26f 7208efbe 7e6f7d8e 9bd34e58 ccdb2e35 3929858b
205913.755598 Mesg 70 message_send: e5c3c2e5 9a579e81 b6239499 11da1eb0 57181e2f 431fa6d2 24176891 601d629a
205913.756078 Mesg 70 message_send: 9925f86d dbf631c6 a17df944 856f5806 83427764 d7280c0c 44052aa0 558e5574
205913.758164 Mesg 70 message_send: bbcef951 60528fc7 2c82a91b a07c67cb cd35d7d5 cfb76751 38029c84
205913.759464 Misc 60 conf_get_str: [General]:retransmits->5
205913.759825 Trpt 30 transport_send_messages: message 0xecd00 scheduled for retransmission 4 in 13 secs
205913.761562 Timr 10 timer_add_event: event message_send(0xecd00) added before connection_checker(0xf1910), expiration in 13s
^C

Date: Mon, 19 Feb 2001 09:13:27 +0100
From: Niklas Hallqvist <niklasappli.se>
To: Adrian Eurell <techmanultra.net.au>
Cc: techopenbsd.org
Subject: Re: isakmpd and Cisco

> 194443.116201 Default message_parse_payloads: invalid next payload type 33
> in payload of type 11
> 194443.118194 Default dropped message from 1.2.3.4 port 500 due to
> notification type INVALID_PAYLOAD_TYPE

This is most likely a preshared secret mismatch, double check that you
are using the same secret on both sides.

Niklas

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]