Hi,
tcpdump shows only isakmp information , there is no information about
esp and AH header.
08:05:55.761245 IP 202.70.87.123.isakmp > ws130173.corporate-access.com.isakmp:
isakmp: phase 1 ? ident[E]
08:05:55.775403 IP 202.70.87.121 > 202.70.87.123: ICMP redirect
ws130173.corporate-access.com to host ws130173.corporate-access.com, length 556
08:05:55.778172 IP 202.70.87.123.isakmp > ws130173.corporate-access.com.isakmp:
isakmp: phase 1 ? ident[E]
Regards,
John
VANHULLEBUS Yvan <[EMAIL PROTECTED]> wrote: On Tue, Nov 20, 2007 at 08:46:28AM
-0800, john decot wrote:
> Hi,
>
> I have change life time in both side i.e 28800 sec but unlucky again.
>
[
> 2007-11-20 20:27:31: ERROR: ignore information because ISAKMP-SA has not been
> established yet.
Do a tcpdump/wireshark and have a look at what's in that informational
message...
Yvan.
--
NETASQ
http://www.netasq.com
---------------------------------
Be a better sports nut! Let your teams follow you with Yahoo Mobile. Try it now.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
