Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

[Users] encrypted imformational exchange message is invalod because of it is incomplete ISAKMP SA

From: Bhagat Panwar <bhagat_panwar(at)yahoo.com>
Date: Tue Apr 06 2004 - 12:49:54 EDT


hello peoples
i am trying to connect LAN -LAN VPN from Cisco vpn concerator and Linux Freeswan  

 i just installed freeswan 2.05 on RH 9 Built 2.4.20-30.9smp everthing is installed and working fine when i start the vpn connection i get the following error
"encrypted imformational exchange message is invalod because of it is incomplete ISAKMP SA"
 

my ipsec.conf file
version 2
config setup

           interfaces="ipsec0=eth0"
           kilpsdebug=none
           plutodebug=all
           uniqueids=yes
conn vpn
          type=tunnel
          keyingtries=0
          authby=secret
           left=62.x.y.z
           leffnexthop=62.x.y.a
           leftsubnet=208.a.b.0/24
           right=212.a.b.c
           rightsubnet=192.168.a.0/24
           keylife=8h
           ikelifetime=8h
           auto=add
           pfs=yes
           
 

my ipsec.secret file
212.a.b.c 62.x.y.z :PSK "MY SECRET KEY"    

when i pass the command
# ipsec auto --up vpn
i get the following error
" encrypted imformational exchange message is invalid because it is for incomplete ISAKMP SA"
 same error in /var/log/secure and message logs  

2) we have any option where we can enter our IKE Proposal in freeswan?  

please help
thanx in advance
bhagat panwar  



Do you Yahoo!?
Yahoo! Small Business $15K Web Design Giveaway - Enter today Received on Tue Apr 6 12:57:45 2004

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 13:02:30 EDT

Do you need help?X

Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library