On Wed, 7 May 2014, Nels Lindquist wrote:
May 7 07:57:10 mail pluto[28834]: | sending IKE fragment id '1',
number '1'
Can you try with both ike_frag=force and ike_frag=no ?
With ike_frag=force we get additional lines (discarding duplicate
packet; already STATE_MAIN_R2); with ike_frag=no the behaviour is the
same as before. Would you like "plutodebug=all" logs for either or
both of these settings?
Hmm. I don't think that will help as it is the other end that is
unhappy. Have you tried this with another device, eg an iphone in L2TP
mode or something? Just as reference?
May 7 13:45:04 mail pluto[14792]: "L2TP-Win2KXP"[1] 209.82.26.89 #6:
discarding duplicate packet; already STATE_MAIN_R2
Is there a way to get the ipsec logs from the Windows machine to find
out what it is complaining about?
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_ipsec_tools.mspx?mfr=true
Paul
_______________________________________________
Swan mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan
