On Tue, Oct 28, 2008 at 03:46:25PM +0100, Piotr Jasiukajtis wrote: > I got this when I try to create IPsec connection between SXCE and S10. > I use preshared keys. > > It works: > SXCE <==> SXCE > 2008.11 <==> SXCE > > It doesn't work: > SXCE (b93) <==> S10u4 + latest patches > 2008.11 (b99) <==> S10u4 + latest patches > > The configuration is the same in both cases.
You absolutely sure about that? > Tue Oct 28 2008 15:35:15 +0100: in.iked: Phase 1 negotiation error: code 1 > (Invalid payload type). > Tue Oct 28 2008 15:35:15 +0100: in.iked: Phase 1 error: code 1 (Invalid > payload > type). This indicates a preshared-key failure. Please double-check /etc/inet/secret/ike.preshared on both nodes. As a debugging measure, run in.iked by hand with "-p2" set, then do "ikeadm dump preshared" to make sure what you see there is what's on the peer. Dan
