<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.E-MailFormatvorlage17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
span.hps
{mso-style-name:hps;}
span.shorttext
{mso-style-name:short_text;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hello,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">i have a problem. My Strongswan Linux strongSwan U5.1.2/K3.13.0-71-generic. Ubuntu 12.04.
<o:p></o:p></p>
<p class="MsoNormal">I have a net2net connection. My VPN Server with 20 Fritzboxes.
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN" style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:DE">The compounds were automatically started. Now I get this error message, and the connections do not start automatically.
<o:p></o:p></span></p>
<p class="MsoNormal"><span lang="EN" style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:DE">I start the connection manually with ipsec up name it works. Automatically, I get the error message.</span><span style="font-size:12.0pt;font-family:"Times New Roman",serif;mso-fareast-language:DE"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>syslog<o:p></o:p></b></p>
<p class="MsoNormal">Dec 3 06:36:55 s17338927 charon: 01[ENC] generating INFORMATIONAL_V1 request 3914028965 [ HASH N(AUTH_FAILED) ]<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:55 s17338927 charon: 01[NET] sending packet: from VPNSRVIP[500] to 91.xxx.xxx.137[500] (92 bytes)<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:55 s17338927 charon: 14[NET] received packet: from 87.xxx.xxx.8[500] to VPNSRVIP[500] (124 bytes)<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:55 s17338927 charon: 14[ENC] parsed ID_PROT request 0 [ ID HASH N(INITIAL_CONTACT) ]<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:55 s17338927 charon: 14[CFG] looking for pre-shared key peer configs matching VPNSRVIP...87.xxx.xxx.8[xxxxxxxxxxx.myfritz.net]<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:55 s17338927 charon: 14[IKE] no peer config found<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:55 s17338927 charon: 14[ENC] generating INFORMATIONAL_V1 request 4096300844 [ HASH N(AUTH_FAILED) ]<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:55 s17338927 charon: 14[NET] sending packet: from VPNSRVIP[500] to 87.xxx.xxx.8[500] (92 bytes)<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:55 s17338927 charon: 12[NET] received packet: from fritzboxip[500] to VPNSRVIP[500] (416 bytes)<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:55 s17338927 charon: 12[ENC] parsed ID_PROT request 0 [ SA V V ]<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:55 s17338927 charon: 12[IKE] received XAuth vendor ID<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:55 s17338927 charon: 12[IKE] received DPD vendor ID<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:55 s17338927 charon: 12[IKE] 79.xxx.xxx.2 is initiating a Main Mode IKE_SA<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:55 s17338927 charon: 12[ENC] generating ID_PROT response 0 [ SA V V ]<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:55 s17338927 charon: 12[NET] sending packet: from VPNSRVIP[500] to 79.xxx.xxx.2[500] (116 bytes)<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:56 s17338927 charon: 15[NET] received packet: from 83.xxx.xxx.170[500] to VPNSRVIP[500] (476 bytes)<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:56 s17338927 charon: 15[ENC] parsed ID_PROT request 0 [ SA V V V V V ]<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:56 s17338927 charon: 15[IKE] received XAuth vendor ID<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:56 s17338927 charon: 15[IKE] received DPD vendor ID<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:56 s17338927 charon: 15[IKE] received NAT-T (RFC 3947) vendor ID<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:56 s17338927 charon: 15[IKE] received draft-ietf-ipsec-nat-t-ike-03 vendor ID<o:p></o:p></p>
<p class="MsoNormal">Dec 3 06:36:56 s17338927 charon: 15[ENC] received unknown vendor ID: a2:22:6f:c3:64:50:0f:56:34:ff:77:db:3b:74:f4:1b<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>Ipsec.conf <o:p></o:p></b></p>
<p class="MsoNormal">conn name<o:p></o:p></p>
<p class="MsoNormal"> left=vpnserverip<o:p></o:p></p>
<p class="MsoNormal"> leftsubnet=10.254.254.0/24<o:p></o:p></p>
<p class="MsoNormal"> #<o:p></o:p></p>
<p class="MsoNormal"> ike=aes256-sha-modp1024<o:p></o:p></p>
<p class="MsoNormal"> esp=aes192-sha1-modp1024<o:p></o:p></p>
<p class="MsoNormal"> #<o:p></o:p></p>
<p class="MsoNormal"> right=%any<o:p></o:p></p>
<p class="MsoNormal"> rightid=@xxxxxxx.myfritz.net<o:p></o:p></p>
<p class="MsoNormal"> rightsubnet=10.1.1.0/24<o:p></o:p></p>
<p class="MsoNormal"> #<o:p></o:p></p>
<p class="MsoNormal"> ikelifetime=4h<o:p></o:p></p>
<p class="MsoNormal"> keylife=1h<o:p></o:p></p>
<p class="MsoNormal"> #<o:p></o:p></p>
<p class="MsoNormal"> authby=secret<o:p></o:p></p>
<p class="MsoNormal"> auto=start<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><b>ipsec.secrets<o:p></o:p></b></p>
<p class="MsoNormal" style="text-align:justify"># PSK <o:p></o:p></p>
<p class="MsoNormal" style="text-align:justify">vpnserverip intern : PSK "yxxxxxxxxx"<o:p></o:p></p>
<p class="MsoNormal" style="text-align:justify"><o:p> </o:p></p>
<p class="MsoNormal" style="text-align:justify"># ServerHostkey<o:p></o:p></p>
<p class="MsoNormal" style="text-align:justify">: RSA ServerHostKey.pem<o:p></o:p></p>
<p class="MsoNormal" style="text-align:justify"><o:p> </o:p></p>
<p class="MsoNormal"><span class="hps"><span lang="EN">it worked.</span></span><span class="shorttext"><span lang="EN">
</span></span><span class="hps"><span lang="EN">Now it</span></span><span class="shorttext"><span lang="EN">
</span></span><span class="hps"><span lang="EN">suddenly</span></span><span class="shorttext"><span lang="EN">
</span></span><span class="hps"><span lang="EN">stopped working.<o:p></o:p></span></span></p>
<p class="MsoNormal"><span class="hps"><span lang="EN"><o:p> </o:p></span></span></p>
<p class="MsoNormal"><span class="hps"><span lang="EN"><o:p> </o:p></span></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Mit freundlichen Grüßen aus Gladbeck<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">-------------------------------<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Marc Müller<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">_______________________________________________<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">APITSolutions<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Andreas Patzelt IT Solutions<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Krusenkamp 24<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">45964 Gladbeck<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Telefon: 02043 / 9357169<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Fax: 02043 / 9350639<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">E-Mail: </span>
<span style="mso-fareast-language:DE"><a href="mailto:marc.mueller@apit-solutions.de"><span style="color:blue">marc.mueller@apit-solutions.de</span></a><span style="color:black"><o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Web: </span>
<span style="mso-fareast-language:DE"><a href="http://apit-solutions.de"><span style="color:blue">http://apit-solutions.de</span></a><span style="color:black"><o:p></o:p></span></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">USt-IdNr.: DE273467836
<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Geschäftsführung und Verantwortlichkeit:<o:p></o:p></span></p>
<p class="MsoNormal"><span style="color:black;mso-fareast-language:DE">Andreas Patzelt</span><span style="color:#1F497D;mso-fareast-language:DE"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>