[ previous ] [ next ] [ threads ]
 
 From:  "Johan Bergquist" <johan dot bergquist at fredab dot se>
 To:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  Okay got some more logging from the box with the IPSEC
 Date:  Fri, 26 Mar 2004 17:00:07 +0100
To me it seems as if the phase 1 doesn't go through... or am I wrong?
 
Mar 26 16:55:26  racoon: ERROR: pfkey.c:741:pfkey_timeover(): xx.xxx.174.231
give up to get IPsec-SA due to time up to wait.
Mar 26 16:54:56  /kernel: WARNING: pseudo-random number generator used for
IPsec processing
Mar 26 16:54:56  racoon: INFO: isakmp.c:942:isakmp_ph2begin_i(): initiate
new phase 2 negotiation: xxx.xxx.31.62[0]<=>xx.xxx.174.231[0]
Mar 26 16:54:55  racoon: INFO: isakmp.c:2412:log_ph1established(): ISAKMP-SA
established xxx.xxx.31.62[500]-xx.xxx.174.231[500]
spi:0d6afcd37318f4dc:84ffca8b35af17de
Mar 26 16:54:55  racoon: NOTIFY: oakley.c:2040:oakley_skeyid(): couldn't
find the proper pskey, try to get one by the peer's address.
Mar 26 16:54:55  racoon: WARNING: ipsec_doi.c:3099:ipsecdoi_checkid1(): ID
value mismatched.
Mar 26 16:54:55  racoon: WARNING: ipsec_doi.c:3077:ipsecdoi_checkid1(): ID
type mismatched.
Mar 26 16:54:55  racoon: INFO: vendorid.c:128:check_vendorid(): received
Vendor ID: KAME/racoon
Mar 26 16:54:55  racoon: INFO: isakmp.c:803:isakmp_ph1begin_i(): begin
Aggressive mode.
Mar 26 16:54:55  racoon: INFO: isakmp.c:798:isakmp_ph1begin_i(): initiate
new phase 1 negotiation: xxx.xxx.31.62[500]<=>xx.xxx.174.231[500]
Mar 26 16:54:55  racoon: INFO: isakmp.c:1684:isakmp_post_acquire(): IPsec-SA
request for xx.xxx.174.231 queued due to no phase1 found.