Date: Thu, 22 Nov 2007 07:08:21 -0800 (PST) From: john decot <johndecot@yahoo.com> To: VANHULLEBUS Yvan <vanhu_bsd@zeninc.net> Cc: freebsd-security@freebsd.org Subject: Re: IPSEC help Message-ID: <201510.15632.qm@web55408.mail.re4.yahoo.com> In-Reply-To: <20071120165659.GA1949@zen.inc>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi,
tcpdump shows only isakmp information , there is no information about esp and AH header.
08:05:55.761245 IP 202.70.87.123.isakmp > ws130173.corporate-access.com.isakmp: isakmp: phase 1 ? ident[E]
08:05:55.775403 IP 202.70.87.121 > 202.70.87.123: ICMP redirect ws130173.corporate-access.com to host ws130173.corporate-access.com, length 556
08:05:55.778172 IP 202.70.87.123.isakmp > ws130173.corporate-access.com.isakmp: isakmp: phase 1 ? ident[E]
Regards,
John
VANHULLEBUS Yvan <vanhu_bsd@zeninc.net> wrote: On Tue, Nov 20, 2007 at 08:46:28AM -0800, john decot wrote:
> Hi,
>
> I have change life time in both side i.e 28800 sec but unlucky again.
>
[
> 2007-11-20 20:27:31: ERROR: ignore information because ISAKMP-SA has not been established yet.
Do a tcpdump/wireshark and have a look at what's in that informational
message...
Yvan.
--
NETASQ
http://www.netasq.com
---------------------------------
Be a better sports nut! Let your teams follow you with Yahoo Mobile. Try it now.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201510.15632.qm>