|
||||||||
Not sure what happened - I had an entire lead in for that last request. Here is what I said originally: I am trying to setup an m0n0 IPSEC tunnel between my offices' new T1 (we will migrate soon) and my house (DSL) both running identical m0n0wall versions, etc. both are running 3COM nice on the outside interface (pretty new NICs). PPTP from my office to home works like a champ, no problems there. The IPSEC tunnel keeps failing - the ultimate goal here is to send a m0n0wall rule set to our office in Australia, currently they have a Smoothwall Express there but in order to have standardization and IT run out of our main office I want them on a m0n0. I have had 0 success connecting to Smoothwall and wanted to proof of concept this so my boss could see m0n0 working and we could standardize things onto BSD for security and Linux for servers, etc.. ANYWAYS - below are my logs from both the office and home when I try to run a ping from home to an inside office IP address. SORRY about my last email - I am sure you were all scratching your heads. So you know I have scoured the lists, google, everywhere for a hint on this one: From Home Machine when pinging internal office IP: Feb 1 10:21:08 racoon: INFO: initiate new phase 2 negotiation: 66.92.184.208[0]<=>69.17.50.2[0] Feb 1 10:21:05 racoon: ERROR: 69.17.50.2 give up to get IPsec-SA due to time up to wait. Feb 1 10:20:35 racoon: INFO: initiate new phase 2 negotiation: 66.92.184.208[0]<=>69.17.50.2[0] Feb 1 10:20:32 racoon: ERROR: 69.17.50.2 give up to get IPsec-SA due to time up to wait. Feb 1 10:20:02 racoon: INFO: initiate new phase 2 negotiation: 66.92.184.208[0]<=>69.17.50.2[0] Feb 1 10:19:58 racoon: ERROR: 69.17.50.2 give up to get IPsec-SA due to time up to wait. Feb 1 10:19:28 racoon: INFO: initiate new phase 2 negotiation: 66.92.184.208[0]<=>69.17.50.2[0] Feb 1 10:19:25 racoon: ERROR: 69.17.50.2 give up to get IPsec-SA due to time up to wait. Feb 1 10:18:55 racoon: INFO: initiate new phase 2 negotiation: 66.92.184.208[0]<=>69.17.50.2[0] Feb 1 10:18:52 racoon: ERROR: 69.17.50.2 give up to get IPsec-SA due to time up to wait. Feb 1 10:18:22 racoon: INFO: initiate new phase 2 negotiation: 66.92.184.208[0]<=>69.17.50.2[0] Feb 1 10:18:19 racoon: ERROR: 69.17.50.2 give up to get IPsec-SA due to time up to wait. Feb 1 10:17:49 racoon: INFO: initiate new phase 2 negotiation: 66.92.184.208[0]<=>69.17.50.2[0] Feb 1 10:17:45 racoon: ERROR: 69.17.50.2 give up to get IPsec-SA due to time up to wait. Feb 1 10:17:15 racoon: INFO: initiate new phase 2 negotiation: 66.92.184.208[0]<=>69.17.50.2[0] Feb 1 10:17:11 racoon: ERROR: 69.17.50.2 give up to get IPsec-SA due to time up to wait. Feb 1 10:16:41 racoon: INFO: initiate new phase 2 negotiation: 66.92.184.208[0]<=>69.17.50.2[0] From office machine: Feb 1 10:22:37 racoon: ERROR: failed to pre-process packet. Feb 1 10:22:37 racoon: ERROR: failed to get proposal for responder. Feb 1 10:22:37 racoon: ERROR: no policy found: 10.10.0.0/16[0] 192.168.168.0/24[0] proto=any dir=in Feb 1 10:22:37 racoon: INFO: respond new phase 2 negotiation: 69.17.50.2[0]<=>66.92.184.208[0] Feb 1 10:22:27 racoon: ERROR: failed to pre-process packet. Feb 1 10:22:27 racoon: ERROR: failed to get proposal for responder. Feb 1 10:22:27 racoon: ERROR: no policy found: 10.10.0.0/16[0] 192.168.168.0/24[0] proto=any dir=in Feb 1 10:22:27 racoon: INFO: respond new phase 2 negotiation: 69.17.50.2[0]<=>66.92.184.208[0] Feb 1 10:22:17 racoon: ERROR: failed to pre-process packet. Feb 1 10:22:17 racoon: ERROR: failed to get proposal for responder. Feb 1 10:22:17 racoon: ERROR: no policy found: 10.10.0.0/16[0] 192.168.168.0/24[0] proto=any dir=in Feb 1 10:22:17 racoon: INFO: respond new phase 2 negotiation: 69.17.50.2[0]<=>66.92.184.208[0] Feb 1 10:22:03 racoon: ERROR: failed to pre-process packet. Feb 1 10:22:03 racoon: ERROR: failed to get proposal for responder. Feb 1 10:22:03 racoon: ERROR: no policy found: 10.10.0.0/16[0] 192.168.168.0/24[0] proto=any dir=in Feb 1 10:22:03 racoon: INFO: respond new phase 2 negotiation: 69.17.50.2[0]<=>66.92.184.208[0] Feb 1 10:21:52 racoon: ERROR: failed to pre-process packet. Feb 1 10:21:52 racoon: ERROR: failed to get proposal for responder. Feb 1 10:21:52 racoon: ERROR: no policy found: 10.10.0.0/16[0] 192.168.168.0/24[0] proto=any dir=in Feb 1 10:21:52 racoon: INFO: respond new phase 2 negotiation: 69.17.50.2[0]<=>66.92.184.208[0] Feb 1 10:21:42 racoon: ERROR: failed to pre-process packet. Feb 1 10:21:42 racoon: ERROR: failed to get proposal for responder. |