Hi, I installed:
The latest tun tap package vpn-client-install.dmg qt-mac-opensource-4.7.1.dmg I imported a known working profile into my Macbook Pro's Shrewsoft Client. (running Mountain Lion) from my Windows 7 Shrewsoft client, that connects fine with my client's Netscreen 5GT firewall. Here is the initial connection sequence information I get after I enter the Xauth login data and click connect: config loaded for site 'jb' attached to key daemon ... peer configured iskamp proposal configured esp proposal configured client configured local id configured remote id configured pre-shared key configured bringing up tunnel ... internal error occurred tunnel disabled detached from key daemon Firewall log (the names and addresses have been changed to protect the innocent…): 2012-11-19 16:51:08 IKE<76.21.33.15>: XAuth login expired and was terminated for username <johndoe> at <0.0.0.0/0.0.0.0>. 2012-11-19 16:51: 03infoRejected an IKE packet on untrust from 1.1.1.1:54591 to 72.2.2.2:4500 with cookies 33b14e8233d6607d and acc3f69b4f2a034b because a Phase 2 packet arrived while XAuth was still pending. 2012-11-19 16:51:03infoIKE<76.21.33.15> Phase 1: Completed Aggressive mode negotiations with a <28800>-second lifetime. 2012-11-19 16:51:03infoIKE<76.21.33.15> Phase 1: Completed for user <[email protected]>. 2012-11-19 16:51:03infoIKE<76.21.33.15> Phase 1: IKE responder has detected NAT in front of the remote device. 2012-11-19 16:51:03infoIKE<76.21.33.15> Phase 1: IKE responder has detected NAT in front of the local device. 2012-11-19 16:51:03infoIKE<76.21.33.15> Phase 1: Responder starts AGGRESSIVE mode negotiations. Again --the Shrewsoft profile works fine on my Dell under Windows 7. The proposals, UFQDN string, PSK, etc. are correct (or the profile wouldn't be working the way it does on my PC's Shrewsoft client. Any suggestions as to what may be causing the problem? Does this version that's been ported over to the Mac OS actually work under Mountain Lion? I suppose I can try it on one of my Lion machines, but I'll wait to hear if there is some valuable data from you on this. Thanks, Allen
_______________________________________________ vpn-help mailing list [email protected] http://lists.shrew.net/mailman/listinfo/vpn-help
