On Tue, 14 Jan 2003, Andrew Alcheev wrote:
> I have setup an IPSec tunnel between FreeBSD 4.7-stable (system
> 18.11.02)/racoon 20021120a and Windows XP Prof.
> FreeBSD acts as gateway, tunneling connections from Windows to world.
> IPSec crypts link between unix and win only.
> spdadd 0.0.0.0/0 192.168.99.10/32 any -P out ipsec
> spdadd 192.168.99.10/32 0.0.0.0/0 any -P in ipsec
> While other side (Windows XP) initiates connect to hosts behind the
> tunnel, all works fine.
> If connect arrives from other hosts before SA has been established,
> then racoon can't initiate Phase 1
> tcpdump output:
> 15:29:13.408122 192.168.99.1.500 > 192.168.99.10.500: isakmp: phase 1 I agg: [|sa]
> 15:29:13.409117 192.168.99.10.500 > 192.168.99.1.500: isakmp: phase 2/others R inf:
> 2003-01-14 15:29:13: DEBUG: isakmp.c:222:isakmp_handler(): 56 bytes message received
> 2003-01-14 15:29:13: DEBUG: isakmp.c:346:isakmp_main(): malformed cookie received or
>the initiator's cookies collide.
> What is wrong ?
Hard to tell without a bit more information. Are you using a pre-shared
secret or digital certificates for authentication? Can you send a
sanitized copy of your racoon.conf?
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message