[strongSwan-dev] Strongswan is sending MALFORMED packet when received the INIT message from Juniper GW

jegathesh malaiyappan mjegakathir at gmail.com
Mon Jul 22 13:15:57 CEST 2013


Hi All,

*IKE Version: *IKEv1

*Strongswan version:* 4.5.3

*Peer:* Juniper SRX

2004-01-01T01:46:20.993349+00:00 (none) [warning]   pluto[5694]:  packet
from 64.64.0.1:500: received Vendor ID payload [Dead Peer Detection]
2004-01-01T01:46:20.993397+00:00 (none) [warning]   pluto[5694]:  packet
from 64.64.0.1:500: ignoring Vendor ID payload
[draft-stenberg-ipsec-nat-traversal-01]
2004-01-01T01:46:20.993422+00:00 (none) [warning]   pluto[5694]:  packet
from 64.64.0.1:500: ignoring Vendor ID payload
[draft-stenberg-ipsec-nat-traversal-02]
2004-01-01T01:46:20.993442+00:00 (none) [warning]   pluto[5694]:  packet
from 64.64.0.1:500: received Vendor ID payload
[draft-ietf-ipsec-nat-t-ike-00]
2004-01-01T01:46:20.993462+00:00 (none) [warning]   pluto[5694]:  packet
from 64.64.0.1:500: received Vendor ID payload
[draft-ietf-ipsec-nat-t-ike-02]
2004-01-01T01:46:20.993481+00:00 (none) [warning]   pluto[5694]:  packet
from 64.64.0.1:500: ignoring Vendor ID payload
[draft-ietf-ipsec-nat-t-ike-02_n]
2004-01-01T01:46:20.993795+00:00 (none) [warning]   pluto[5694]:  packet
from 64.64.0.1:500: received Vendor ID payload
[draft-ietf-ipsec-nat-t-ike-03]
2004-01-01T01:46:20.993833+00:00 (none) [warning]   pluto[5694]:  packet
from 64.64.0.1:500: received Vendor ID payload [RFC 3947]
2004-01-01T01:46:20.993855+00:00 (none) [warning]   pluto[5694]:  packet
from 64.64.0.1:500: ignoring Vendor ID payload
[699369228741c6d4ca094c93e242c9de19e7b7c60000000500000500]
2004-01-01T01:46:20.993876+00:00 (none) [warning]   pluto[5694]:  packet
from 64.64.0.1:500: Proposal Payload must be alone in Oakley SA; found
ISAKMP_NEXT_P following Proposal
2004-01-01T01:46:20.993896+00:00 (none) [warning]   pluto[5694]:  packet
from 64.64.0.1:500: sending notification PAYLOAD_MALFORMED to 64.64.0.1:500

Strongswan is sending unrecognized (MALFORMED) packet some cases when get
the INIT message from SRX juniper router.

Anyone have idea for this error?

Thanks.
Jegathesh
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20130722/728bd13e/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Unrec_ike_message.png
Type: image/png
Size: 23916 bytes
Desc: not available
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20130722/728bd13e/attachment.png>


More information about the Dev mailing list