vpn trouble

ralf at dzie-ciuch.pl ralf at dzie-ciuch.pl
Wed Jun 23 08:28:59 UTC 2010


Ok I found that my psk.txt has got wrong permissions

Now I can get SAD keys!

ISAKMP-SA established 78.x.x.x[500]-95.x.x.x[500]
spi:8a8881ee5182cbfb:53dab6ad5a65629d

But one thing - why can't I ping 10.10.1.90? 

Regards
Ralf

On Wed, 23 Jun 2010 10:05:55 +0200, VANHULLEBUS Yvan <vanhu at FreeBSD.org>
wrote:
> On Wed, Jun 23, 2010 at 09:53:56AM +0200, ralf at dzie-ciuch.pl wrote:
>> 
>> Hi,
> 
> Hi.
> 
> 
>> I set everything like you wrote and I can send and receice packets but
>> still I can't ping to host 10.10.1.90,
>> and when I type #setkey -D there is no SAD entry
>> 
>> What could it be?
>> 
>> This is part of racoon log:
> [....]
> Do you have a line which says:
> 
> <date> INFO: ISAKMP-SA established <IPs> <extra infos>
> 
> 
> Until you have such line, you still have issues with your phase 1
> negociation, and we'll need almost a full debug to be able to help you
> (be careful: there are some private informations in such debug, like
> public IPs, preshared-keys, etc....).
> 
> 
> Yvan.
> _______________________________________________
> freebsd-net at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"


More information about the freebsd-net mailing list