|
||||||||
To me it seems as if the phase 1 doesn't go through... or am I wrong? Mar 26 16:55:26 racoon: ERROR: pfkey.c:741:pfkey_timeover(): xx.xxx.174.231 give up to get IPsec-SA due to time up to wait. Mar 26 16:54:56 /kernel: WARNING: pseudo-random number generator used for IPsec processing Mar 26 16:54:56 racoon: INFO: isakmp.c:942:isakmp_ph2begin_i(): initiate new phase 2 negotiation: xxx.xxx.31.62[0]<=>xx.xxx.174.231[0] Mar 26 16:54:55 racoon: INFO: isakmp.c:2412:log_ph1established(): ISAKMP-SA established xxx.xxx.31.62[500]-xx.xxx.174.231[500] spi:0d6afcd37318f4dc:84ffca8b35af17de Mar 26 16:54:55 racoon: NOTIFY: oakley.c:2040:oakley_skeyid(): couldn't find the proper pskey, try to get one by the peer's address. Mar 26 16:54:55 racoon: WARNING: ipsec_doi.c:3099:ipsecdoi_checkid1(): ID value mismatched. Mar 26 16:54:55 racoon: WARNING: ipsec_doi.c:3077:ipsecdoi_checkid1(): ID type mismatched. Mar 26 16:54:55 racoon: INFO: vendorid.c:128:check_vendorid(): received Vendor ID: KAME/racoon Mar 26 16:54:55 racoon: INFO: isakmp.c:803:isakmp_ph1begin_i(): begin Aggressive mode. Mar 26 16:54:55 racoon: INFO: isakmp.c:798:isakmp_ph1begin_i(): initiate new phase 1 negotiation: xxx.xxx.31.62[500]<=>xx.xxx.174.231[500] Mar 26 16:54:55 racoon: INFO: isakmp.c:1684:isakmp_post_acquire(): IPsec-SA request for xx.xxx.174.231 queued due to no phase1 found. |