in the client site the logs is:
**************************
racoon: ERROR: phase1 negotiation failed due to time up.
262dd3c71e164259:7449f4a01dabf8d9
racoon: []: INFO: phase2 sa deleted 88.88.88.88-77.77.77.77
racoon: INFO: request for establishing IPsec-SA was queued due to no
phase1 found.
racoon: []: INFO: phase2 sa expired 88.88.88.88-77.77.77.77
racoon: []: INFO: phase2 sa deleted 88.88.88.88-77.77.77.77
racoon: INFO: request for establishing IPsec-SA was queued due to no
phase1 found.
racoon: []: INFO: phase2 sa expired 88.88.88.88-77.77.77.77
racoon: INFO: received Vendor ID: DPD
racoon: INFO: begin Identity Protection mode.
racoon: []: INFO: initiate new phase 1 negotiation:
88.88.88.88[500]<=>77.77.77.77[500]
racoon: []: INFO: IPsec-SA request for 77.77.77.77 queued due to no
phase1 found.
racoon: INFO: delete phase 2 handler.
racoon: []: ERROR: phase2 negotiation failed due to time up waiting for
phase1. ESP 77.77.77.77[0]->88.88.88.88[0]
racoon: ERROR: phase1 negotiation failed due to time up.
e6fb5d325ef6d5a4:48cad08db515f094
**************************
Christos Pelekis wrote:
Hi,
i have 2 pfsense installs (both have 1.2 release)
I have setup in aggressive mode a vpn channel and work fine.
But if i change this to main (only this change, all the remain config
is the same) then i have this errors:
******************
racoon: ERROR: phase1 negotiation failed.
racoon: ERROR: failed to process packet.
racoon: ERROR: couldn't find the pskey for 88.88.88.88.
racoon: INFO: received Vendor ID: DPD
racoon: INFO: begin Identity Protection mode.
racoon: [Unknown Gateway/Dynamic]: INFO: respond new phase 1
negotiation: 77.77.77.77[500]<=>88.88.88.88[500]
*********************
the server 88.88.88.88 have dynamic ip
my config is: main-3des-md5-dh2-lifetime8000-preshared_key-ESP-pfs_off.
I hope my config is ok because if i change only the main to agressive
in both server the vpn is working fine.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
