<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
The server is not involved here but perhaps someone else with
Windows 10 operating against StrongSwan has seen it...<br>
<br>
Recently my laptop started throwing an error "The parameter is
incorrect" when I try to start the VPN connection. Deleting the
connection and re-setting it doesn't clear the problem. If I trace
on the server side I get the SA packet out and it blows up there.<br>
<br>
I see this much out of the server:<br>
<br>
Dec 17 14:40:13 NewFS charon: 05[NET] received packet: from
192.168.1.19[500] to<br>
70.169.168.7[500] (880 bytes)<br>
Dec 17 14:40:13 NewFS charon: 05[ENC] parsed IKE_SA_INIT request 0 [
SA KE No N(<br>
NATD_S_IP) N(NATD_D_IP) V V V V ]<br>
Dec 17 14:40:13 NewFS charon: 05[IKE] received MS NT5 ISAKMPOAKLEY
v9 vendor ID<br>
Dec 17 14:40:13 NewFS charon: 05[IKE] received MS-Negotiation
Discovery Capable<br>
vendor ID<br>
Dec 17 14:40:13 NewFS charon: 05[IKE] received Vid-Initial-Contact
vendor ID<br>
Dec 17 14:40:13 NewFS charon: 05[ENC] received unknown vendor ID:
01:52:8b:bb:c0<br>
:06:96:12:18:49:ab:9a:1c:5b:2a:51:00:00:00:02<br>
Dec 17 14:40:13 NewFS charon: 05[IKE] 192.168.1.19 is initiating an
IKE_SA<br>
Dec 17 14:40:13 NewFS charon: 05[IKE] sending cert request for
"C=US, ST=Florida<br>
, L=Niceville, O=Cuda Systems LLC, CN=Cuda Systems LLC CA, E=Cuda
Systems LLC CA<br>
"<br>
Dec 17 14:40:13 NewFS charon: 05[ENC] generating IKE_SA_INIT
response 0 [ SA KE<br>
No N(NATD_S_IP) N(NATD_D_IP) CERTREQ N(MULT_AUTH) ]<br>
Dec 17 14:40:13 NewFS charon: 05[NET] sending packet: from
70.169.168.7[500] to<br>
192.168.1.19[500] (333 bytes)<br>
<br>
And that's it; the client throws the error and is starting to say
*something* about validating some thing or another (perhaps my local
end?) but it never goes further.<br>
<br>
Setting up a connection from a DIFFERENT Win10 machine works fine,
so it's computer-specific. It never gets to the point of checking
certificates, so whatever it is that's making it angry is happening
on the client side before it gets there.<br>
<br>
If anyone has run into this and has any ideas on where to look it
would be appreciated. I turned on RAS tracing and it tells me
nothing; there is no error in the logs that generates, and I can't
find an exception in the system event log either.<br>
<br>
My other clients are working fine; Android and Windows....<br>
<br>
<div class="moz-signature">-- <br>
Karl Denninger<br>
<a href="mailto:karl@denninger.net">karl@denninger.net</a><br>
<i>The Market Ticker</i><br>
<font size="-2"><i>[S/MIME encrypted email preferred]</i></font>
</div>
</body>
</html>