<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'><br>Thank you for your prompt reply.<div><br></div><div>And you're correct, i apologize, i am actually using strongswan.</div><div><br></div><div>I am a bit reluctant to upgrade to the latest version as i have other tunnels up and running which are critical and cannot endure downtime. though i do have the upgrade task in my backlog.</div><div><br></div><div>As for juniper logs, this keeps reoccurring every time i try to initiate the tunnel :</div><div><br></div><div><br></div><div><div>2014-05-19 16:48:40 system info 00536 IKE $MyNattedPublicIp Phase 2 msg ID </div><div> 6f4e415f: Negotiations have failed.</div><div>2014-05-19 16:48:40 system info 00536 IKE $MyNattedPublicIp Phase 2: No policy </div><div> exists for the proxy ID received: </div><div> local ID (10.100.241.50/</div><div> 255.255.255.255, 0, 0) remote ID </div><div> ($MyNattedPublicIp/255.255.255.255, 0, </div><div> 0).</div><div>2014-05-19 16:48:40 system info 00536 IKE $MyNattedPublicIp Phase 2 msg ID </div><div> 6f4e415f: Responded to the peer's </div><div> first message.</div><div>2014-05-19 16:48:40 system info 00536 IKE $MyNattedPublicIp Phase 2 msg ID </div><div> 6b66d5c9: Negotiations have failed.</div><div>2014-05-19 16:48:40 system info 00536 IKE $MyNattedPublicIp Phase 2 msg ID </div><div> 6b66d5c9: Responded to the peer's </div><div> first message.3:48 PM</div></div><div><br></div><div><br></div><div><br></div><div><br><div>> Subject: Re: [strongSwan] phase 2 failing - Juniper Netscreen ISG 2000<br>> From: martin@strongswan.org<br>> To: r_o_l_a_n_d@hotmail.com<br>> CC: users@lists.strongswan.org<br>> Date: Mon, 19 May 2014 16:46:45 +0200<br>> <br>> Hi Roland,<br>> <br>> > this is my first time configuring openswan with juniper, all my other<br>> > configs were with cisco (which are currently working) something wrong<br>> > with configuration which is preventing me from establishing the<br>> > tunnel.<br>> <br>> This is the user mailing list of the strongSwan project, which these<br>> days is completely different from openswan. If you need help with<br>> openswan related issues, you should ask on their mailing list.<br>> <br>> If you are actually using strongSwan, I recommend to try using a newer<br>> 5.x release, which comes with a new unified implementation for IKEv1 and<br>> IKEv2 (no pluto anymore).<br>> <br>> > 117 "some_dst/0x2" #21: STATE_QUICK_I1: initiate<br>> > 010 "some_dst/0x2" #21: STATE_QUICK_I1: retransmission; will wait 20s for response<br>> > 010 "some_dst/0x1" #20: STATE_QUICK_I1: retransmission; will wait 20s for response<br>> <br>> Obviously your Juniper box does not reply to the Quick Mode exchange.<br>> Maybe you find some more information in the Juniper log?<br>> <br>> Regards<br>> Martin<br>> <br>> <br></div></div> </div></body>
</html>