The router log confirms your suspicion. 2011 Jan 6 20:49:38 [FVS318g] [IKE] Received attribute type "ISAKMP_CFG_REQUEST" from 174.62.176.140[4500]_ 2011 Jan 6 20:49:39 [FVS318g] [IKE] 192.168.2.50 IP address is assigned to remote peer 174.62.176.140[4500]_ 2011 Jan 6 20:49:39 [FVS318g] [IKE] Responding to new phase 2 negotiation: <VPN HOST MASKED>[0]<=>174.62.176.140[0]_ 2011 Jan 6 20:49:39 [FVS318g] [IKE] Failed to get IPsec SA configuration for: 192.168.1.0/24<->10.0.0.19/32 from client.domain.com_
The strange thing is that it was working just fine two days ago. I decided to reboot the router just for kicks to see if maybe something in memory got corrupted but no joy. Is there something in the adapter that needs to be disabled? I have a vague memory of needing to do something along those lines. I'm connecting over Wireless N. Mike -----Original Message----- From: kevin vpn <[email protected]> To: [email protected] Sent: Thu, Jan 6, 2011 9:21 pm Subject: Re: [vpn-help] Not getting SA traffic out or in On Thu, 06 Jan 2011 19:59:15 -0500 [email protected] wrote: > The tunnel shows connected, but I can't seen to pass any SA traffic between the client and remote host. NETGEAR FVS318G. The Trace tool shows 0 bytes in both directions. I'm using mode config and the IP .. 11/01/06 19:50:05 -> : send NAT-T:KEEP-ALIVE packet 10.0.0.18:4500 -> <MASKED>:4500 11/01/06 19:50:05 -> : resend 1 phase2 packet(s) [0/2] 10.0.0.18:4500 -> <MASKED>:4500 11/01/06 19:50:10 -> : resend 1 phase2 packet(s) [1/2] 10.0.0.18:4500 -> <MASKED>:4500 11/01/06 19:50:15 -> : resend 1 phase2 packet(s) [2/2] 10.0.0.18:4500 -> <MASKED>:4500 11/01/06 19:50:20 DB : phase1 found 11/01/06 19:50:20 -> : send NAT-T:KEEP-ALIVE packet 10.0.0.18:4500 -> <MASKED>:4500 11/01/06 19:50:20 ii : resend limit exceeded for phase2 exchange 11/01/06 19:50:20 ii : phase2 removal before expire time 11/01/06 19:50:20 DB : phase2 deleted ( obj count = 0 ) Hi Mike, It looks to me like Phase 2 is not completing properly. Can you ouble-check to make sure the tunneled IP policy matches in both the lient and the gateway? ______________________________________________ pn-help mailing list [email protected] ttp://lists.shrew.net/mailman/listinfo/vpn-help
_______________________________________________ vpn-help mailing list [email protected] http://lists.shrew.net/mailman/listinfo/vpn-help
