Alexis,
Attached is the debug log for the client. I'm having trouble getting
the logs for the gateway end, but I will keep trying.
Tim
On 3/14/2015 10:49 AM, Alexis La Goutte wrote:
Hi Tim,
It is possible to attach debug log ? (on client and on gateway)
because missing information to help...
On Thu, Mar 12, 2015 at 4:00 PM, Tim Hutchison
<[email protected] <mailto:[email protected]>>
wrote:
Hello,
I am trying to use a client-to-LAN VPN connection with the Shrew
Soft client and a TP-Link TL-ER6020 VPN Router. I've followed
TP-Link's tutorial, but I have not been able to connect. Are
there any known issues connecting to this router or do you have
any suggestions on how to solve this problem? Also, when I use
the VPN Trace, I don't get any output. Here is the output when I
try to connect:
config loaded for site 'Youngblood'
attached to key daemon ...
peer configured
iskamp proposal configured
esp proposal configured
client configured
local id configured
remote id configured
pre-shared key configured
bringing up tunnel ...
negotiation timout occurred
tunnel disabled
detached from key daemon
Thanks,
Tim
_______________________________________________
vpn-help mailing list
[email protected] <mailto:[email protected]>
https://lists.shrew.net/mailman/listinfo/vpn-help
15/03/23 08:39:28 ## : IKE Daemon, ver 2.2.2
15/03/23 08:39:28 ## : Copyright 2013 Shrew Soft Inc.
15/03/23 08:39:28 ## : This product linked OpenSSL 1.0.1c 10 May 2012
15/03/23 08:39:28 ii : opened 'C:\Program Files\ShrewSoft\VPN
Client\debug\iked.log'
15/03/23 08:39:28 ii : opened 'C:\Program Files\ShrewSoft\VPN
Client/debug/dump-ike-decrypt.cap'
15/03/23 08:39:28 ii : opened 'C:\Program Files\ShrewSoft\VPN
Client/debug/dump-ike-encrypt.cap'
15/03/23 08:39:28 ii : rebuilding vnet device list ...
15/03/23 08:39:28 ii : device ROOT\VNET\0000 disabled
15/03/23 08:39:28 ii : network process thread begin ...
15/03/23 08:39:28 ii : pfkey process thread begin ...
15/03/23 08:39:28 ii : ipc server process thread begin ...
15/03/23 08:39:32 ii : ipc client process thread begin ...
15/03/23 08:39:32 <A : peer config add message
15/03/23 08:39:32 <A : proposal config message
15/03/23 08:39:32 <A : proposal config message
15/03/23 08:39:32 <A : client config message
15/03/23 08:39:32 <A : local id '1224zmz284' message
15/03/23 08:39:32 <A : remote id '3je7483bk2' message
15/03/23 08:39:32 <A : preshared key message
15/03/23 08:39:32 <A : remote resource message
15/03/23 08:39:32 <A : peer tunnel enable message
15/03/23 08:39:32 DB : peer added ( obj count = 1 )
15/03/23 08:39:32 ii : local address 192.168.57.101 selected for peer
15/03/23 08:39:32 DB : tunnel added ( obj count = 1 )
15/03/23 08:39:32 DB : new phase1 ( ISAKMP initiator )
15/03/23 08:39:32 DB : exchange type is aggressive
15/03/23 08:39:32 DB : 192.168.57.101:500 <-> 208.125.79.154:500
15/03/23 08:39:32 DB : d94e4e6069dda27f:0000000000000000
15/03/23 08:39:32 DB : phase1 added ( obj count = 1 )
15/03/23 08:39:32 >> : security association payload
15/03/23 08:39:32 >> : - proposal #1 payload
15/03/23 08:39:32 >> : -- transform #1 payload
15/03/23 08:39:32 >> : key exchange payload
15/03/23 08:39:32 >> : nonce payload
15/03/23 08:39:32 >> : identification payload
15/03/23 08:39:32 >> : vendor id payload
15/03/23 08:39:32 ii : local supports nat-t ( draft v00 )
15/03/23 08:39:32 >> : vendor id payload
15/03/23 08:39:32 ii : local supports nat-t ( draft v01 )
15/03/23 08:39:32 >> : vendor id payload
15/03/23 08:39:32 ii : local supports nat-t ( draft v02 )
15/03/23 08:39:32 >> : vendor id payload
15/03/23 08:39:32 ii : local supports nat-t ( draft v03 )
15/03/23 08:39:32 >> : vendor id payload
15/03/23 08:39:32 ii : local supports nat-t ( rfc )
15/03/23 08:39:32 >> : vendor id payload
15/03/23 08:39:32 ii : local supports FRAGMENTATION
15/03/23 08:39:32 >> : vendor id payload
15/03/23 08:39:32 >> : vendor id payload
15/03/23 08:39:32 ii : local supports DPDv1
15/03/23 08:39:32 >> : vendor id payload
15/03/23 08:39:32 ii : local is SHREW SOFT compatible
15/03/23 08:39:32 >> : vendor id payload
15/03/23 08:39:32 ii : local is NETSCREEN compatible
15/03/23 08:39:32 >> : vendor id payload
15/03/23 08:39:32 ii : local is SIDEWINDER compatible
15/03/23 08:39:32 >> : vendor id payload
15/03/23 08:39:32 ii : local is CISCO UNITY compatible
15/03/23 08:39:32 >= : cookies d94e4e6069dda27f:0000000000000000
15/03/23 08:39:32 >= : message 00000000
15/03/23 08:39:32 -> : send IKE packet 192.168.57.101:500 -> 208.125.79.154:500
( 534 bytes )
15/03/23 08:39:32 DB : phase1 resend event scheduled ( ref count = 2 )
15/03/23 08:39:32 <- : recv IKE packet 208.125.79.154:500 -> 192.168.57.101:500
( 56 bytes )
15/03/23 08:39:32 DB : phase1 found
15/03/23 08:39:32 ii : processing informational packet ( 56 bytes )
15/03/23 08:39:32 =< : cookies d94e4e6069dda27f:75fcef7b8351a043
15/03/23 08:39:32 =< : message 70155758
15/03/23 08:39:32 << : notification payload
15/03/23 08:39:32 ii : received peer INVALID-EXCHANGE-TYPE notification
15/03/23 08:39:32 ii : - 208.125.79.154:500 -> 192.168.57.101:500
15/03/23 08:39:32 ii : - isakmp spi = d94e4e6069dda27f:75fcef7b8351a043
15/03/23 08:39:32 ii : - data size 0
15/03/23 08:39:37 -> : resend 1 phase1 packet(s) [0/2] 192.168.57.101:500 ->
208.125.79.154:500
15/03/23 08:39:37 <- : recv IKE packet 208.125.79.154:500 -> 192.168.57.101:500
( 56 bytes )
15/03/23 08:39:37 DB : phase1 found
15/03/23 08:39:37 ii : processing informational packet ( 56 bytes )
15/03/23 08:39:37 =< : cookies d94e4e6069dda27f:5593c7d6137c731e
15/03/23 08:39:37 =< : message b4d5c1ba
15/03/23 08:39:37 << : notification payload
15/03/23 08:39:37 ii : received peer INVALID-EXCHANGE-TYPE notification
15/03/23 08:39:37 ii : - 208.125.79.154:500 -> 192.168.57.101:500
15/03/23 08:39:37 ii : - isakmp spi = d94e4e6069dda27f:5593c7d6137c731e
15/03/23 08:39:37 ii : - data size 0
15/03/23 08:39:42 -> : resend 1 phase1 packet(s) [1/2] 192.168.57.101:500 ->
208.125.79.154:500
15/03/23 08:39:42 <- : recv IKE packet 208.125.79.154:500 -> 192.168.57.101:500
( 56 bytes )
15/03/23 08:39:42 DB : phase1 found
15/03/23 08:39:42 ii : processing informational packet ( 56 bytes )
15/03/23 08:39:42 =< : cookies d94e4e6069dda27f:686e30963de0d766
15/03/23 08:39:42 =< : message 8faf4e2f
15/03/23 08:39:42 << : notification payload
15/03/23 08:39:42 ii : received peer INVALID-EXCHANGE-TYPE notification
15/03/23 08:39:42 ii : - 208.125.79.154:500 -> 192.168.57.101:500
15/03/23 08:39:42 ii : - isakmp spi = d94e4e6069dda27f:686e30963de0d766
15/03/23 08:39:42 ii : - data size 0
15/03/23 08:39:47 -> : resend 1 phase1 packet(s) [2/2] 192.168.57.101:500 ->
208.125.79.154:500
15/03/23 08:39:47 <- : recv IKE packet 208.125.79.154:500 -> 192.168.57.101:500
( 56 bytes )
15/03/23 08:39:47 DB : phase1 found
15/03/23 08:39:47 ii : processing informational packet ( 56 bytes )
15/03/23 08:39:47 =< : cookies d94e4e6069dda27f:a80ef8211efcf73a
15/03/23 08:39:47 =< : message 8a43eea9
15/03/23 08:39:47 << : notification payload
15/03/23 08:39:47 ii : received peer INVALID-EXCHANGE-TYPE notification
15/03/23 08:39:47 ii : - 208.125.79.154:500 -> 192.168.57.101:500
15/03/23 08:39:47 ii : - isakmp spi = d94e4e6069dda27f:a80ef8211efcf73a
15/03/23 08:39:47 ii : - data size 0
15/03/23 08:39:52 ii : resend limit exceeded for phase1 exchange
15/03/23 08:39:52 ii : phase1 removal before expire time
15/03/23 08:39:52 DB : phase1 deleted ( obj count = 0 )
15/03/23 08:39:52 DB : policy not found
15/03/23 08:39:52 DB : policy not found
15/03/23 08:39:52 DB : policy not found
15/03/23 08:39:52 DB : policy not found
15/03/23 08:39:52 DB : policy not found
15/03/23 08:39:52 DB : policy not found
15/03/23 08:39:52 DB : removing tunnel config references
15/03/23 08:39:52 DB : removing tunnel phase2 references
15/03/23 08:39:52 DB : removing tunnel phase1 references
15/03/23 08:39:52 DB : tunnel deleted ( obj count = 0 )
15/03/23 08:39:52 DB : removing all peer tunnel references
15/03/23 08:39:52 DB : peer deleted ( obj count = 0 )
15/03/23 08:39:52 ii : ipc client process thread exit ...
15/03/23 08:39:20 ## : IPSEC Daemon, ver 2.2.2
15/03/23 08:39:20 ## : Copyright 2013 Shrew Soft Inc.
15/03/23 08:39:20 ## : This product linked OpenSSL 1.0.1c 10 May 2012
15/03/23 08:39:20 ## : This product linked zlib v1.2.3
15/03/23 08:39:20 ii : opened 'dump-ipsec-pub.cap'
15/03/23 08:39:20 ii : opened 'dump-ipsec-prv.cap'
15/03/23 08:39:20 ii : network send process thread begin ...
15/03/23 08:39:20 ii : network recv process thread begin ...
15/03/23 08:39:20 ii : pfkey server process thread begin ...
15/03/23 08:39:20 ii : vflt recv device attached
15/03/23 08:39:20 ii : vflt send device attached
15/03/23 08:39:20 ii : pfkey client process thread begin ...
15/03/23 08:39:20 K< : recv DUMP UNSPEC message
15/03/23 08:39:20 K< : recv X_SPDDUMP UNSPEC message
15/03/23 08:39:21 ii : pfkey client process thread begin ...
15/03/23 08:39:21 K< : message REGISTER AH received
15/03/23 08:39:21 K< : message REGISTER ESP received
15/03/23 08:39:21 K< : message REGISTER IPCOMP received
15/03/23 08:39:21 K< : recv X_SPDDUMP UNSPEC message
15/03/23 08:39:27 ii : pfkey client process thread exit ...
15/03/23 08:39:28 ii : pfkey client process thread begin ...
15/03/23 08:39:28 K< : message REGISTER AH received
15/03/23 08:39:28 K< : message REGISTER ESP received
15/03/23 08:39:28 K< : message REGISTER IPCOMP received
15/03/23 08:39:28 K< : recv X_SPDDUMP UNSPEC message
_______________________________________________
vpn-help mailing list
[email protected]
https://lists.shrew.net/mailman/listinfo/vpn-help
