Hello list, I'm trying to access the VPN at work and it consistently fails to connect on my Ubuntu box with the error "negotiation timeout occurred". The very same VPN configuration works under Windows, so I would appreciate any pointers on what I should do to get this working.
My environment details: Operating System: Ubuntu 11.10 64 bit. Shrewsoft version: 2.1.7 I'm attaching my iked.log with this email. I've replaced my work VPN address with 1.1.1.1, so rest assured that an incorrect address is not the cause of my problems :) Thanks, Philip
11/10/15 18:40:55 ## : IKE Daemon, ver 2.1.7 11/10/15 18:40:55 ## : Copyright 2010 Shrew Soft Inc. 11/10/15 18:40:55 ## : This product linked OpenSSL 1.0.0e 6 Sep 2011 11/10/15 18:40:55 ii : opened '/var/log/iked.log' 11/10/15 18:40:55 ii : ipc server process thread begin ... 11/10/15 18:40:55 ii : pfkey process thread begin ... 11/10/15 18:40:55 ii : network process thread begin ... 11/10/15 18:40:55 K< : recv pfkey REGISTER AH message 11/10/15 18:40:55 K< : recv pfkey REGISTER ESP message 11/10/15 18:40:55 K< : recv pfkey REGISTER IPCOMP message 11/10/15 18:40:55 K! : recv X_SPDDUMP message failure ( errno = 2 ) 11/10/15 18:41:01 ii : ipc client process thread begin ... 11/10/15 18:41:01 <A : peer config add message 11/10/15 18:41:01 DB : peer added ( obj count = 1 ) 11/10/15 18:41:01 ii : local address 192.168.2.5 selected for peer 11/10/15 18:41:01 DB : tunnel added ( obj count = 1 ) 11/10/15 18:41:01 <A : proposal config message 11/10/15 18:41:01 <A : proposal config message 11/10/15 18:41:01 <A : client config message 11/10/15 18:41:01 <A : local id 'philip.goh' message 11/10/15 18:41:01 <A : preshared key message 11/10/15 18:41:01 <A : peer tunnel enable message 11/10/15 18:41:01 DB : new phase1 ( ISAKMP initiator ) 11/10/15 18:41:01 DB : exchange type is aggressive 11/10/15 18:41:01 DB : 192.168.2.5:500 <-> 1.1.1.1:500 11/10/15 18:41:01 DB : b2d75efe9ac8d128:0000000000000000 11/10/15 18:41:01 DB : phase1 added ( obj count = 1 ) 11/10/15 18:41:01 >> : security association payload 11/10/15 18:41:01 >> : - proposal #1 payload 11/10/15 18:41:01 >> : -- transform #1 payload 11/10/15 18:41:01 >> : key exchange payload 11/10/15 18:41:01 >> : nonce payload 11/10/15 18:41:01 >> : identification payload 11/10/15 18:41:01 >> : vendor id payload 11/10/15 18:41:01 ii : local supports FRAGMENTATION 11/10/15 18:41:01 >> : vendor id payload 11/10/15 18:41:01 ii : local is SHREW SOFT compatible 11/10/15 18:41:01 >> : vendor id payload 11/10/15 18:41:01 ii : local is NETSCREEN compatible 11/10/15 18:41:01 >> : vendor id payload 11/10/15 18:41:01 ii : local is SIDEWINDER compatible 11/10/15 18:41:01 >> : vendor id payload 11/10/15 18:41:01 ii : local is CISCO UNITY compatible 11/10/15 18:41:01 >= : cookies b2d75efe9ac8d128:0000000000000000 11/10/15 18:41:01 >= : message 00000000 11/10/15 18:41:01 -> : send IKE packet 192.168.2.5:500 -> 1.1.1.1:500 ( 394 bytes ) 11/10/15 18:41:01 DB : phase1 resend event scheduled ( ref count = 2 ) 11/10/15 18:41:11 -> : resend 1 phase1 packet(s) 192.168.2.5:500 -> 1.1.1.1:500 11/10/15 18:41:21 -> : resend 1 phase1 packet(s) 192.168.2.5:500 -> 1.1.1.1:500 11/10/15 18:41:31 -> : resend 1 phase1 packet(s) 192.168.2.5:500 -> 1.1.1.1:500 11/10/15 18:41:41 ii : resend limit exceeded for phase1 exchange 11/10/15 18:41:41 ii : phase1 removal before expire time 11/10/15 18:41:41 DB : phase1 deleted ( obj count = 0 ) 11/10/15 18:41:41 DB : policy not found 11/10/15 18:41:41 DB : policy not found 11/10/15 18:41:41 DB : policy not found 11/10/15 18:41:41 DB : policy not found 11/10/15 18:41:41 DB : tunnel stats event canceled ( ref count = 1 ) 11/10/15 18:41:41 DB : removing tunnel config references 11/10/15 18:41:41 DB : removing tunnel phase2 references 11/10/15 18:41:41 DB : removing tunnel phase1 references 11/10/15 18:41:41 DB : tunnel deleted ( obj count = 0 ) 11/10/15 18:41:41 DB : removing all peer tunnel refrences 11/10/15 18:41:41 DB : peer deleted ( obj count = 0 ) 11/10/15 18:41:41 ii : ipc client process thread exit ...
_______________________________________________ vpn-help mailing list [email protected] http://lists.shrew.net/mailman/listinfo/vpn-help
