[strongSwan] iphone xauth-PSK (received invalid IKE header)

[Andreas Steffen]

Hello Anthony,

two comments:

- XAUTH is a proprietary IKEv1 extension but the log that you are
  showing comes from the IKEv2 daemon. Please set

    config setup
         charonstart=no

    conn xauth-iphone
         keyexchange=ikev1
         ....

  in ipsec.conf and check for the log generated by the IKEv1 pluto
  daemon (grep pluto /var/log/*)

- The error message

    header verification failed

  means that something is awfully broken. (Which client are you using?
  The Cisco VPN client on the iphone???)

Regards

Andreas

On 10/29/2010 08:27 PM, Anthony Moon wrote:
> How come no matter what I do I keep getting the same error message from
> strongswan?
> 
>  
> 
> This is the only output I get when I attempting to connect, has anyone
> ever experienced this?
> 
>  
> 
> 04[CFG] added configuration 'xauth-iphone'
> 
> 06[ENC] header verification failed
> 
> 06[NET] received invalid IKE header from 24.114.237.26 - ignored
> 
> 06[ENC] header verification failed
> 
> 06[NET] received invalid IKE header from 24.114.237.26 - ignored
> 
> 06[ENC] header verification failed
> 
> 06[NET] received invalid IKE header from 24.114.237.26 - ignored
> 
> 06[ENC] header verification failed
> 
> 06[NET] received invalid IKE header from 24.114.237.26 - ignored
> 
> -- 
> 
> Anthony Moon
> 
> EZProvider Networks, Inc.
> 
> http://ezp.net
> 
> 1.888.397.7853 x203
> 
>  
> 
> 
> 
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users


-- 
======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==