[strongSwan] Problems with IKEv1 Dead-Peer-Detection in 5.0.1

[Dmitry Korzhevin]

Hello Martin

Please, look at server log, i can't paste it because it verbose (4.5M):

http://madsanity.kiev.ua/files/charon.log

Look at ip: 89.252.56.204

This user DPD problem start at 13:35 (1 hour difference between server 
log and client log)

Client side log:

https://gist.github.com/3945759

I use Debian and strongSwan 5.0.1 on server side. I will provide any 
needed info to help detect source of this problem.




24.10.2012 11:34, Martin Willi пишет:
> Hi,
>
>> IKEv1 Information-Notice: transmit success. (R-U-THERE?).
>> IKEv1 Information-Notice: transmit success. (R-U-THERE?).
>> IKEv1 Dead-Peer-Detection: maximum retransmits. (DPD maximum retransmits).
>> IPSec Controller: IKE FAILED. phase 6, assert 0
>
> racoon sends DPD requests, but strongSwan does not seem to answer them.
> What is the log output on strongSwan? Does it receive the DPD messages?
>
> Regards
> Martin
>

Best Regards,
Dmitry

---
Dmitry KORZHEVIN
System Administrator
STIDIA S.A. - Luxembourg

e: dmitry.korzhevin at stidia.com
m: +38 093 874 5453
w: http://www.stidia.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4488 bytes
Desc: ���������������������������������� �������������� S/MIME
URL: <http://lists.strongswan.org/pipermail/users/attachments/20121024/2d5f908c/attachment.bin>