Hi all,

I try to setup an IPSEC tunnel between two F14 boxes. I use PSK as
authentication.

Here is the log in the source computer :

Dec 14 18:41:50 Fedora-64-2 racoon: INFO: IPsec-SA request for
8x.2xx.1x.1xx queued due to no phase1 found.
Dec 14 18:41:50 Fedora-64-2 racoon: INFO: initiate new phase 1
negotiation: 192.168.50.181[500]<=>8x.2xx.1x.1xx[500]
Dec 14 18:41:50 Fedora-64-2 racoon: INFO: begin Aggressive mode.
Dec 14 18:42:21 Fedora-64-2 racoon: ERROR: phase2 negotiation failed due
to time up waiting for phase1. ESP 8x.2xx.1x.1xx[0]->192.168.50.181[0]
Dec 14 18:42:21 Fedora-64-2 racoon: INFO: delete phase 2 handler.
Dec 14 18:42:40 Fedora-64-2 racoon: ERROR: phase1 negotiation failed due
to time up. 0d039762895e0503:0000000000000000


Any idea ???

Thanks for any help

BR
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

On Tue, 2010-12-14 at 18:46 +0100, Luc MAIGNAN wrote:

>
> Here is the log in the source computer :

First thing to do is make sure your packets are getting through to the
destination computer. What do the logs there show? If you run tcpdump on
the destination computer, can you see the packets coming from the source
computer?

--Greg



--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

>
> Here is the log in the source computer :

First thing to do is make sure your packets are getting through to the
destination computer. What do the logs there show? If you run tcpdump on
the destination computer, can you see the packets coming from the source
computer?

Before diving into the internals of IPSEC tunnels, you need to rule out more obvious
things like firewalls and general network reachability.

--Greg




--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines