On Mon, 7 Feb 2005, Kerem Erciyes wrote:
> IP Address is ofcourse swapped, anything else is the same basic
> configuration from the docbook pages.
> I tried with and without preshared keys, IPs on the both ends are
> identical still everytime I try I pass on to phase2 and then get the
> Feb 7 12:38:50 racoon: ERROR: pfkey.c:804:pfkey_timeover(): 22.214.171.124 give up to get IPsec-SA
due to time up to wait.
> Feb 7 12:38:20 racoon: INFO: isakmp.c:952:isakmp_ph2begin_i(): initiate new phase 2 negotiation:
> So the phase 1 is a success but phase 2 no chance...
Yes. Since this is a m0n0wall<->m0n0wall link, you can double-check the
configs directly by using exec.php to:
Compare this between the two m0n0walls. (Actually, checking the PSK
should be unnecessary given that Phase 1 succeeds).