Prezados Senhores,
Realmente a necessidade � que faz o "ladr�o". Ent�o,
consegui avan�os na ci�ncia da VPN, que mundo fant�stico!
May 27 17:41:26 filial pluto[32038]: added connection description
"VPN-Conection"
May 27 17:41:26 filial pluto[32038]: listening for IKE messages
May 27 17:41:26 filial pluto[32038]: adding interface ipsec0/ppp0
200.164.120.45
May 27 17:41:26 filial pluto[32038]: loading secrets from
"/etc/ipsec.secrets"
May 27 17:41:26 filial pluto[32038]: "/etc/ipsec.secrets" line 21: RSA
modulus too small for security: less than 512 bits
May 27 17:41:28 filial pluto[32038]: "VPN-Conection" #1: initiating Main
Mode
May 27 17:41:32 filial pluto[32038]: "VPN-Conection" #2: responding to Main
Mode
May 27 17:41:32 filial pluto[32038]: "VPN-Conection" #2: Can't authenticate:
no preshared key found for [EMAIL PROTECTED]' and [EMAIL PROTECTED]'. Attribute
OAKLEY_AUTHENTICATION_METHOD
May 27 17:41:32 filial last message repeated 3 times
May 27 17:41:32 filial pluto[32038]: "VPN-Conection" #2: no acceptable
Oakley Transform
May 27 17:42:38 filial pluto[32038]: "VPN-Conection" #1: max number of
retransmissions (2) reached STATE_MAIN_I1. No acceptable response to our
first IKE message
May 27 17:42:38 filial pluto[32038]: "VPN-Conection" #1: starting keying
attempt 2 of at most 3, but releasing whack
May 27 17:42:38 filial pluto[32038]: "VPN-Conection" #3: initiating Main
Mode to replace #1
May 27 17:43:48 filial pluto[32038]: "VPN-Conection" #3: max number of
retransmissions (2) reached STATE_MAIN_I1. No acceptable response to our
first IKE message
May 27 17:43:48 filial pluto[32038]: "VPN-Conection" #3: starting keying
attempt 3 of at most 3
May 27 17:43:48 filial pluto[32038]: "VPN-Conection" #4: initiating Main
Mode to replace #3
May 27 17:44:58 filial pluto[32038]: "VPN-Conection" #4: max number of
retransmissions (2) reached STATE_MAIN_I1. No acceptable response to our
first IKE message
Seguem as quest�es:
1. rp_filter = `1', preciso realmente estabelecer para false, ou � somente
um warning?!
2. security: less than 512 bits, preciso realmente utilizar uma chave maior
que 128, pois andei lendo e vi que quanto maior a chave maior o tr�fego e
preciso de rapidez;
3. no preshared key found, como n�o?! A chave de um � posta no outro,
correto?!!!
Obs.: Como vcs podem notar estou avan�ando,
n�o sei pra onde mas estou...
SDS,
Leonardo Pinto
OpenLogic Inform�tica Ltda.
Tel.: (71) 316-1235/9944-6206
[EMAIL PROTECTED]
---------------------------------------------------------------------------
Esta lista � patrocinada pela Conectiva S.A. Visite http://www.conectiva.com.br
Arquivo: http://bazar2.conectiva.com.br/mailman/listinfo/linux-br
Regras de utiliza��o da lista: http://linux-br.conectiva.com.br
FAQ: http://www.zago.eti.br/menu.html
