On Tuesday 07 August 2007 12:46:39 Florin Samareanu wrote:
> Salut,
>
> Incerc sa fac o conectare cu racoon la un ar415s si m-am cam impiedicat.
> Mesajul de eroare e asa:
>
>
> 2007-08-07 12:43:12: ERROR: rejected hashtype:
> DB(prop#1:trns#1):Peer(prop#1:trns#3) = MD5:SHA
> 2007-08-07 12:43:12: ERROR: rejected dh_group:
> DB(prop#1:trns#1):Peer(prop#1:trns#3) = 1024-bit MODP group:768-bit MODP
> group
> 2007-08-07 12:43:12: DEBUG: type=Encryption Algorithm, flag=0x8000,
> lorv=DES-CBC
> 2007-08-07 12:43:12: DEBUG: type=Hash Algorithm, flag=0x8000, lorv=MD5
> 2007-08-07 12:43:12: DEBUG: type=Group Description, flag=0x8000,
> lorv=768-bit MODP group
> 2007-08-07 12:43:12: DEBUG: type=Authentication Method, flag=0x8000,
> lorv=GSS-API on Kerberos 5
> 2007-08-07 12:43:12: DEBUG: type=Life Type, flag=0x8000, lorv=seconds
> 2007-08-07 12:43:12: DEBUG: type=Life Duration, flag=0x0000, lorv=4
> 2007-08-07 12:43:12: DEBUG: type=GSS-API endpoint name, flag=0x0000,
> lorv=64
> 2007-08-07 12:43:12: ERROR: rejected authmethod:
> DB(prop#1:trns#1):Peer(prop#1:trns#4) = pre-shared key:GSS-API on
> Kerberos 5
> 2007-08-07 12:43:12: ERROR: rejected dh_group:
> DB(prop#1:trns#1):Peer(prop#1:trns#4) = 1024-bit MODP group:768-bit MODP
> group
> 2007-08-07 12:43:12: ERROR: no suitable proposal found.
> 2007-08-07 12:43:12: ERROR: failed to get valid proposal.
> 2007-08-07 12:43:12: ERROR: failed to process packet.
>
>
>
> Configul arata asa:
>
> remote 1.2.3.4 {
> proposal {
> encryption_algorithm des;
> hash_algorithm md5;
> authentication_method pre_shared_key;
> dh_group modp1024;
> }
> peers_identifier address 1.2.3.4;
>
>
> passive off;
> verify_identifier on;
> lifetime time 30 min;
> exchange_mode main;
> }
>
> Unde gresesc?
>
>
Ar parea ca nu ai aceleasi protocoale la ambele capete.
Pe ar415 ce ai?
Racoon stie des ? ca freeswan nu mergea decat cu 3des
-------------------------------------------------------------
This mail was scanned by BitDefender
For more informations please visit http://www.bitdefender.com
-------------------------------------------------------------
_______________________________________________
RLUG mailing list
[email protected]
http://lists.lug.ro/mailman/listinfo/rlug
