On 04 Mar 2014, at 11:33 , Gilbert Wilson <[email protected]> wrote:

> So, if you’re not seeing anything on the server side in /var/log/ppp/vpnd.log 
> double-check system.log for messages from racoon and vpnd (although from the 
> sound of what you’ve described I’d hazard the guess that you’ll only see logs 
> from racoon, if anything at all).

When I try to connect with the phone I get:

Mar  4 13:19:31 www.kreme.com racoon[224]: Connecting.
Mar  4 13:19:31 www.kreme.com racoon[224]: Invalid exchange type 243 from 
212.24.148.213[130].
Mar  4 13:19:31 www.kreme.com racoon[224]: IPSec Phase 1 started (Initiated by 
peer).

(lots of stuff_

Mar  4 13:19:31 www.kreme.com racoon[224]: rejected hashtype: 
DB(prop#1:trns#6):Peer(prop#1:trns#4) = MD5:SHA
Mar  4 13:19:31 www.kreme.com racoon[224]: rejected prf: 
DB(prop#1:trns#6):Peer(prop#1:trns#4) = MD5.0:0.0
Mar  4 13:19:31 www.kreme.com racoon[224]: no suitable proposal found.
Mar  4 13:19:31 www.kreme.com racoon[224]: failed to get valid proposal.
Mar  4 13:19:31 www.kreme.com racoon[224]: IKE Packet: receive failed. 
(Responder, Main-Mode Message 1).
Mar  4 13:19:31 www.kreme.com racoon[224]: failed to pre-process packet.
Mar  4 13:19:31 www.kreme.com racoon[224]: Phase 1 negotiation failed.

when the Macbook connects:

Mar  4 14:58:52 www.kreme.com racoon[224]: Connecting.
Mar  4 14:58:52 www.kreme.com racoon[224]: IPSec Phase 1 started (Initiated by 
peer).
Mar  4 14:58:52 www.kreme.com racoon[224]: IKE Packet: receive success. 
(Responder, Main-Mode message 1).

(lots of stuff)

Mar  4 14:58:53 www.kreme.com racoon[224]: IKEv1 Phase 2 Responder: success. 
(Responder, Quick-Mode).
Mar  4 14:58:53 www.kreme.com racoon[224]: IPSec Phase 2 established (Initiated 
by peer).
Mar  4 14:58:53 www.kreme.com racoon[224]: >>>>> phase change status = Phase 2 
established


-- 
"Part of the inhumanity of the computer is that, once it is competently
programmed and working smoothly, it is completely honest." - Isaac
Asimov

_______________________________________________
MacOSX-admin mailing list
[email protected]
http://www.omnigroup.com/mailman/listinfo/macosx-admin

Reply via email to