Gregory,

Thanks for sending me the log. Very interesting indeed. There appears to be a logic bug in the client with respect to the SRX modecfg push exchange sequence. This works fine with my SSG but unfortunately not with an SRX ( I don't have one of these ). I'll need to examine the packet exchange more closely later tonight when I have time.

Thanks,

-Matthew

On 12/18/2012 4:17 AM, Gregory Charot (EVENIUM) wrote:
Hello all,

Client side debug has been sent privately to Matthew and Alexis.

Thanks !
Regards,
Greg

Le 17/12/2012 20:29, Alexis La Goutte a écrit :
Hi Gregory (and Jeroen)

In your juniper logs, will see some ike keep alive :

On Mon, Dec 17, 2012 at 8:20 PM, Gregory Charot (EVENIUM)
<[email protected] <mailto:[email protected]>> wrote:

    Dec 17 19:52:50 ike_retransmit_callback: Start, retransmit SA = {
    7afff86f ed1dec02 - 8adb783f 94cb567c}, nego = 1
    Dec 17 19:52:50 ike_send_packet: Start, retransmit previous packet
    SA = { 7afff86f ed1dec02 - 8adb783f 94cb567c}, nego = 1, dst =
    x.x.x.x:1370 routing table id = 0



It is possible to attach a Shrew logs and debug (with dump ike cap files)
http://www.shrew.net/support/wiki/BugReportVpnWindows

Regards,





_______________________________________________
vpn-help mailing list
[email protected]
http://lists.shrew.net/mailman/listinfo/vpn-help


_______________________________________________
vpn-help mailing list
[email protected]
http://lists.shrew.net/mailman/listinfo/vpn-help

Reply via email to