<html><body><div style="color:#000; background-color:#fff; font-family:garamond, new york, times, serif;font-size:12pt"><pre class="vscroll"><font size="2"><code><font><span style="font-style: italic;">Hello,</span><br style="font-style: italic;"><br style="font-style: italic;"><span style="font-style: italic;">I'm trying to connect an iPad to an Ubuntu server with StrongSwan. should be clothed to make it work. (I hope.) But I have a problem. Here is the result of #tail -f /var/logs/auth.log :</span></font><br><font><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: packet from 10.0.0.3:500: received Vendor ID payload [RFC 3947]</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: packet from 10.0.0.3:500: received Vendor ID payload [XAUTH]</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]:
packet from 10.0.0.3:500: ignoring Vendor ID payload [Cisco-Unity]</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: packet from 10.0.0.3:500: received Vendor ID payload [Dead Peer Detection]</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: responding to Main Mode from unknown peer 10.0.0.3</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: NAT-Traversal: Result using RFC 3947: no NAT detected</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: ignoring informational payload, type IPSEC_INITIAL_CONTACT</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family:
arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: Peer ID is ID_DER_ASN1_DN: 'C=FR, O=dipliad, CN=client_2'</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: crl not found</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: certificate status unknown</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: we have a cert and are sending it upon request</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: sent MR3, ISAKMP SA established</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1]
10.0.0.3 #1: sending XAUTH request</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: parsing XAUTH reply</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: extended authentication was successful</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: sending XAUTH status</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: parsing XAUTH ack</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: received XAUTH ack, established</span><br style="font-family:
arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: parsing ModeCfg request</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: unknown attribute type (28683)</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: peer requested virtual IP %any</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: assigning new lease to 'ipad'</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: assigning virtual IP 10.10.0.2 to peer</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family:
arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: sending ModeCfg reply</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: sent ModeCfg reply, established</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #2: responding to Quick Mode</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: <span style="font-weight: bold;">Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x3fafad46</span> (perhaps this is a duplicated packet)</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: sending encrypted notification INVALID_MESSAGE_ID to
10.0.0.3:500</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x3fafad46 (perhaps this is a duplicated packet)</span><br style="font-family: arial,helvetica,sans-serif;"><span style="font-family: arial,helvetica,sans-serif;">pluto[980]: "ios"[1] 10.0.0.3 #1: sending encrypted notification INVALID_MESSAGE_ID to 10.0.0.3:500</span></font><br><br style="font-style: italic;"><span style="font-style: italic;">Is somebody can help me and say me what does mean "</span></code></font><font style="font-style: italic;" size="2"><code><font><span style="font-family: arial,helvetica,sans-serif;"><span style="font-weight: bold;">Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x3fafad46</span></span></font></code></font><font size="2"><span
style="font-style: italic;">"</span><br><br>Thanks a lot.<br><br>Benoît.<br><br>Here is the ipsec.conf :<br><code># ipsec.conf - strongSwan IPsec configuration file<br><br># basic configuration<br>config setup<br> nat_traversal=yes<br> plutostart=yes<br>conn ios<br> keyexchange=ikev1<br> authby=xauthrsasig<br> xauth=server<br> left=%defaultroute<br> leftsubnet=0.0.0.0/0<br> leftfirewall=yes<br> leftcert=serverCert.pem<br> right=%any<br> rightsubnet=10.10.0.0/24<br> rightsourceip=10.10.0.2<br> rightcert=clientCert.pem<br> pfs=no<br> auto=add<br> dpdtimeout=30<br> dpddelay=5</code><br><br></font></pre></div></body></html>