openswan連接vpn出錯
系統是debian lenny，直接通過包管理器安裝的openswan，前一段時間還好用，記憶中好像是升了一下內核之後就這樣了。
104 "roadwarrior" #1: STATE_MAIN_I1: initiate
003 "roadwarrior" #1: ignoring unknown Vendor ID payload
003 "roadwarrior" #1: received Vendor ID payload
003 "roadwarrior" #1: received Vendor ID payload
003 "roadwarrior" #1: received Vendor ID payload method set to=109
106 "roadwarrior" #1: STATE_MAIN_I2: sent MI2, expecting MR2
003 "roadwarrior" #1: NAT-Traversal: Result using RFC 3947 (NAT-Traversal): i am NATed
108 "roadwarrior" #1: STATE_MAIN_I3: sent MI3, expecting MR3
004 "roadwarrior" #1: STATE_MAIN_I4: ISAKMP SA established {auth=OAKLEY_RSA_SIG cipher=oakley_3des_cbc_192 prf=oakley_sha group=modp1024}
041 "roadwarrior" #1: roadwarrior prompt for Username:
Name enter: gengt_linux
040 "roadwarrior" #1: roadwarrior prompt for Password:
Enter secret:
004 "roadwarrior" #1: STATE_XAUTH_I1: XAUTH client - awaiting CFG_set
003 "roadwarrior" #1: discarding duplicate packet; already STATE_XAUTH_I1
004 "roadwarrior" #1: STATE_XAUTH_I1: XAUTH client - awaiting CFG_set
003 "roadwarrior" #1: Mode Config message is unacceptable because it is for an incomplete ISAKMP SA (state=STATE_MODE_CFG_I1)
003 "roadwarrior" #1: Mode Config message is unacceptable because it is for an incomplete ISAKMP SA (state=STATE_MODE_CFG_I1)
003 "roadwarrior" #1: Mode Config message is unacceptable because it is for an incomplete ISAKMP SA (state=STATE_MODE_CFG_I1)
003 "roadwarrior" #1: Mode Config message is unacceptable because it is for an incomplete ISAKMP SA (state=STATE_MODE_CFG_I1)
003 "roadwarrior" #1: Mode Config message is unacceptable because it is for an incomplete ISAKMP SA (state=STATE_MODE_CFG_I1)
003 "roadwarrior" #1: Mode Config message is unacceptable because it is for an incomplete ISAKMP SA (state=STATE_MODE_CFG_I1)
010 "roadwarrior" #1: STATE_MODE_CFG_I1: retransmission; will wait 20s for response
003 "roadwarrior" #1: Mode Config message is unacceptable because it is for an incomplete ISAKMP SA (state=STATE_MODE_CFG_I1)
003 "roadwarrior" #1: Mode Config message is unacceptable because it is for an incomplete ISAKMP SA (state=STATE_MODE_CFG_I1)
003 "roadwarrior" #1: Mode Config message is unacceptable because it is for an incomplete ISAKMP SA (state=STATE_MODE_CFG_I1)
010 "roadwarrior" #1: STATE_MODE_CFG_I1: retransmission; will wait 40s for response
003 "roadwarrior" #1: Mode Config message is unacceptable because it is for an incomplete ISAKMP SA (state=STATE_MODE_CFG_I1)
031 "roadwarrior" #1: max number of retransmissions (2) reached STATE_MODE_CFG_I1
000 "roadwarrior" #1: starting keying attempt 2 of an unlimited number, but releasing whack
# ipsec verify
Checking your system to see if IPsec got installed and started correctly:
Version check and ipsec on-path
Linux Openswan U2.4.12/K2.6.28-1-686 (netkey)
Checking for IPsec support in kernel
NETKEY detected, testing for disabled ICMP send_redirects
NETKEY detected, testing for disabled ICMP accept_redirects
Checking for RSA private key (/etc/ipsec.secrets)
ipsec showhostkey: no default key in "/etc/ipsec.secrets"
Checking that pluto is running
Two or more interfaces found, checking IP forwarding
Checking NAT and MASQUERADEing
Checking for 'ip' command
Checking for 'iptables' command
Opportunistic Encryption Support
請指教
《解決方案》
原帖由 lukygt 於 3/3/2009 08:35 發表 http://bbs2.chinaunix.net/images/common/back.gif
系統是debian lenny，直接通過包管理器安裝的openswan，前一段時間還好用，記憶中好像是升了一下內核之後就這樣了。
104 "roadwarrior" #1: STATE_MAIN_I1: initiate
003 "roadwarrior" #1: ignoring unk ...
重裝下試試吧！
《解決方案》
回復 #2 weigongwan 的帖子
不是吧，工作機哦，重裝麻煩死了，而且，整不明白就重裝感覺很不爽
《解決方案》
XAUTH認證沒過去，是否是用戶名密碼錯誤:mrgreen:
