Re: [Users] ISAKMP Hash Payload - malformed?

From: Andreas Steffen <andreas.steffen(at)strongsec.net>
Date: Tue Apr 20 2004 - 11:08:24 EDT

Could you send me a complete barf (ipsec barf > barf.txt) generated after you tried to connect with the debug parameters

   klipsdebug=none
   plutodebug=all

set in ipsec.conf?

Andreas

Neal Chant wrote:

> Wow! quick reply, thanks
> 
> 2.05 x.509-1.5.3 PLUTO_USES_KEYRR
> NAT_Traversal 0.6b
> 
> 
> 
> -----Original Message-----
> From: Andreas Steffen [mailto:andreas.steffen@strongsec.net]
> Sent: 20 April 2004 3:41 PM
> To: Neal Chant
> Cc: users@mj2.freeswan.org; MSupport
> Subject: Re: [Users] ISAKMP Hash Payload - malformed?
> 
> 
> Which version of the X.509 patch are you using?
> 
>    ipsec pluto --version
> 
> Regards
> 
> Andreas
> 
> Neal Chant wrote:
> 
> 

>>Hi,
>>
>>Am connecting an XP client into a FreeSwan VPN, both are on ADSL and have

> 
> ISAKMP
> 

>>Hash Payload has an unknown value: 128

> 
> packet
> 

>>Apr 16 09:48:18 whfax pluto[3227]: "pfsvpn" #1: sending encrypted

> 
> ISAKMP_NEXT_HASH
> 

>>Apr 16 09:48:18 whfax pluto[3227]: |    ISAKMP version: ISAKMP Version 1.0

> 
> into
> 

>>ISAKMP Hash Payload
>>Apr 16 09:48:18 whfax pluto[3227]: | emitting length of ISAKMP Hash

> 
> Payload:
> 

>>24
>>Apr 16 09:48:18 whfax pluto[3227]: | ***emit ISAKMP Notification Payload:

> 
> ISAKMP_NEXT_NONE
> 

>>Apr 16 09:48:18 whfax pluto[3227]: |    DOI: ISAKMP_DOI_IPSEC

> 
> ISAKMP
> 

>>Notification Payload
>>Apr 16 09:48:18 whfax pluto[3227]: | spi
>>Apr 16 09:48:18 whfax pluto[3227]: | emitting length of ISAKMP

> 
> Notification
> 

>>Payload: 12

> 
> 
> 
> --
> =======================================================================
> Andreas Steffen                   e-mail: andreas.steffen@strongsec.com
> strongSec GmbH                    home:   
http://www.strongsec.com
> Alter Zürichweg 20                phone:  +41 1 730 80 64
> CH-8952 Schlieren (Switzerland)   fax:    +41 1 730 80 65
> ==========================================[strong internet security]===
> 

-- 
=======================================================================
Andreas Steffen                   e-mail: andreas.steffen@strongsec.com
strongSec GmbH                    home:   
http://www.strongsec.com
Alter Zürichweg 20                phone:  +41 1 730 80 64
CH-8952 Schlieren (Switzerland)   fax:    +41 1 730 80 65
==========================================[strong internet security]===
_______________________________________________
FreeS/WAN Users mailing list
users@lists.freeswan.org
https://mj2.freeswan.org/cgi-bin/mj_wwwusr

Received on Tue Apr 20 11:15:56 2004