05-09-2008 03:55 AM
Hi,
Iam establishing a tunnel between our remote location but its giving some error
i have attached log entry of the tunnel please let me know the root cause and how to track that
May 09 17:03:53 1210332833 pluto [5731]: "NortelVPN-1" #163: received Delete SA payload: deleting ISAKMP State #163
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: initiating Main Mode May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: transition from state STATE_MAIN_I1 to state STATE_MAIN_I2
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: STATE_MAIN_I2: sentMI2, expecting MR2
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: received Vendor ID payload [XAUTH]
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: received Vendor ID payload [Dead Peer Detection]
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: received Vendor ID payload [Cisco-Unity]
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: ignoring unknown Vendor ID payload [f87d3e2ec7ccf7955c5a7ca9ec804388]
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: I did not send a certificate because I do not have one.
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: transition from state STATE_MAIN_I2 to state STATE_MAIN_I3
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: STATE_MAIN_I3: sentMI3, expecting MR3
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: Main mode peer ID is ID_IPV4_ADDR:
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: transition from state STATE_MAIN_I3 to state STATE_MAIN_I4
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: STATE_MAIN_I4: ISAKMP SA established {auth=OAKLEY_PRESHARED_KEY cipher=oakley_3des_cbc_192 prf=oakley_md5 group=modp1024}
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: Dead Peer Detection(RFC 3706): enabled
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #167: initiating Quick Mode PSK+ENCRYPT+COMPRESS+TUNNEL+UP+failureDROP {using isakmp#166}
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: ignoring informational payload, type IPSEC_INITIAL_CONTACT
May 09 17:04:13 1210332853 pluto[5731]: "NortelVPN-1" #166: received and ignored informational message
May 09 17:04:14 1210332854 pluto[5731]: "NortelVPN-1" #166: ignoring informational payload, type NO_PROPOSAL_CHOSEN
May 09 17:04:14 1210332854 pluto[5731]: "NortelVPN-1" #166: received and ignored informational message
May 09 17:04:37 1210332877 pluto[5731]: "NortelVPN-1" #165: max number of retransmissions (2) reached STATE_QUICK_I1. No acceptable response to our first Quick Mode message: perhaps peer likes no proposal
May 09 17:04:37 1210332877 pluto[5731]: "NortelVPN-1" #165: starting keying attempt 3 of at most 3
May 09 17:04:37 1210332877 pluto[5731]: "NortelVPN-1" #168: initiating Quick Mode PSK+ENCRYPT+COMPRESS+TUNNEL+UP+failureDROP to replace #165 {using isakmp#166}
May 09 17:04:37 1210332877 pluto [5731]: "NortelVPN-1" #166: ignoring informational payload, type NO_PROPOSAL_CHOSEN
May 09 17:04:37 1210332877 pluto[5731]: "NortelVPN-1" #166: received and ignored informational message
May 09 17:04:43 1210332883 pluto[5731]: "NortelVPN-1" #166: DPD: Warning: R_U_THERE_ACK has invalid cookie
May 09 17:04:43 1210332883 pluto [5731]: "NortelVPN-1" #166: DPD: Warning: R_U_THERE_ACK has invalid cookie
Regards,
Vinoth
05-10-2008 06:02 AM
Vinoth,
Looks like you cannot negotiate Phase 1 settings. I would double check your IKE settings at both ends.
HTH.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide