[strongSwan] Having a problem creating a basic Site-to-Site config !!
Shashi Yash
shashi007 at gmail.com
Thu Aug 25 00:58:51 CEST 2011
Trying to setup ipsec site to site scenario on two red hat machines. I
get the following error: "no acceptable proposal found" on both
machines. Can you guys please tell me why I'm getting the following
error.
I jave pasted the configs and logs from both machines.
RH1: ipsec.conf
conn net-net
left=10.19.61.35
leftsubnet=192.168.100.0/24
leftcert=rh1_Cert.pem
right=10.19.61.67
rightsubnet=192.168.200.0/24
leftid="C=us, ST=il, O=ics, OU=mp, CN=RH6-1"
auto=start
ike=3des
esp=aes256gcm16-modp1024-modp2048,aes128gcm16-modp1024-modp2048
RH2:ipsec.conf
conn net-net
left=10.19.61.67
leftsubnet=192.168.200.0/24
leftcert=rh2_Cert.pem
right=10.19.61.35
rightsubnet=192.168.100.0/24
rightid="C=us, ST=il, O=ics, OU=mp, CN=RH6-2"
auto=start
ike=3des
esp=aes256gcm16-modp1024-modp2048,aes128gcm16-modp1024-modp2048
RH1 Log:
-------------------
13[NET] received packet: from 10.19.61.67[500] to 10.19.61.35[500]
13[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]
13[IKE] 10.19.61.67 is initiating an IKE_SA
13[IKE] no acceptable proposal found
13[ENC] generating IKE_SA_INIT response 0 [ ]
13[NET] sending packet: from 10.19.61.35[500] to 10.19.61.67[500]
14[NET] received packet: from 10.19.61.67[500] to 10.19.61.35[500]
14[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]
14[IKE] 10.19.61.67 is initiating an IKE_SA
14[IKE] no acceptable proposal found
RH2 Log:
---------------------
10[IKE] initiating IKE_SA net-net[1] to 10.19.61.35
10[ENC] generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]
10[NET] sending packet: from 10.19.61.67[500] to 10.19.61.35[500]
11[NET] received packet: from 10.19.61.35[500] to 10.19.61.67[500]
11[ENC] payload of type SECURITY_ASSOCIATION not occurred 1 times (0)
11[IKE] IKE_SA_INIT response with message ID 0 processing failed
12[IKE] retransmit 1 of request with message ID 0
12[NET] sending packet: from 10.19.61.67[500] to 10.19.61.35[500]
13[NET] received packet: from 10.19.61.35[500] to 10.19.61.67[500]
13[ENC] payload of type SECURITY_ASSOCIATION not occurred 1 times (0)
13[IKE] IKE_SA_INIT response with message ID 0 processing failed
14[NET] received packet: from 10.19.61.35[500] to 10.19.61.67[500]
14[ENC] parsed IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) ]
14[IKE] 10.19.61.35 is initiating an IKE_SA
14[IKE] no acceptable proposal found
Thanks in Advance
-shashi..
More information about the Users
mailing list