You are right, the keys are different. Thanks! Dan McDonald pisze: > On Tue, Oct 28, 2008 at 03:46:25PM +0100, Piotr Jasiukajtis wrote: >> I got this when I try to create IPsec connection between SXCE and S10. >> I use preshared keys. >> >> It works: >> SXCE <==> SXCE >> 2008.11 <==> SXCE >> >> It doesn't work: >> SXCE (b93) <==> S10u4 + latest patches >> 2008.11 (b99) <==> S10u4 + latest patches >> >> The configuration is the same in both cases. > > You absolutely sure about that? > >> Tue Oct 28 2008 15:35:15 +0100: in.iked: Phase 1 negotiation error: code 1 >> (Invalid payload type). >> Tue Oct 28 2008 15:35:15 +0100: in.iked: Phase 1 error: code 1 (Invalid >> payload >> type). > > This indicates a preshared-key failure. Please double-check > /etc/inet/secret/ike.preshared on both nodes. > > As a debugging measure, run in.iked by hand with "-p2" set, then do "ikeadm > dump preshared" to make sure what you see there is what's on the peer. > > Dan
-- Regards, Piotr Jasiukajtis | estibi | SCA OS0072 http://estseg.blogspot.com
