From owner-freebsd-net@FreeBSD.ORG Tue Jun 22 15:53:01 2010 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 362D2106566B; Tue, 22 Jun 2010 15:53:01 +0000 (UTC) (envelope-from ralf@dzie-ciuch.pl) Received: from mail.ewipo.pl (mail.ewipo.pl [94.23.240.128]) by mx1.freebsd.org (Postfix) with ESMTP id ACA558FC1B; Tue, 22 Jun 2010 15:53:00 +0000 (UTC) Received: from mail.ewipo.pl (localhost [127.0.0.1]) by mail.ewipo.pl (Postfix) with ESMTP id 7219B22910; Tue, 22 Jun 2010 17:52:53 +0200 (CEST) X-Virus-Scanned: amavisd-new at wrealizacji.pl Received: from mail.ewipo.pl ([127.0.0.1]) by mail.ewipo.pl (mail.ewipo.pl [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id yTPpXc1h92wp; Tue, 22 Jun 2010 17:52:51 +0200 (CEST) Received: by mail.ewipo.pl (Postfix, from userid 80) id A4B89228F9; Tue, 22 Jun 2010 17:52:51 +0200 (CEST) To: VANHULLEBUS Yvan X-PHP-Script: poczta.wrealizacji.pl/index.php for 89.250.193.50 MIME-Version: 1.0 Date: Tue, 22 Jun 2010 17:52:51 +0200 From: In-Reply-To: <20100622153541.GA72211@zeninc.net> References: <87260c422232fa7409a4b374341dd106@ewipo.pl> <20100622143543.GA72020@zeninc.net> <20100622153541.GA72211@zeninc.net> Message-ID: <6caa9895ae1710b9f48a227116a4340c@ewipo.pl> X-Sender: ralf@dzie-ciuch.pl User-Agent: EWIPO Webmail/0.3.1 Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset=UTF-8 Cc: freebsd-net@freebsd.org Subject: Re: vpn trouble X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 22 Jun 2010 15:53:01 -0000 Hmmm, aggressive mode wasn't help :( Still I got only negotiation, so I try to send packets but I don't receive it at all. On my server 78.x.x.x I got ipfw allow all from any to any. On the other side 95.x.x.x they tell me that they do it everything right - only I can't connect :( Maybe I don't set route correctly? Is this mean that I don't receive password from other side? ERROR: phase1 negotiation failed due to time up. 5d300bcf894a18f5:0000000000000000 Best regards Ralf On Tue, 22 Jun 2010 17:35:42 +0200, VANHULLEBUS Yvan wrote: > On Tue, Jun 22, 2010 at 05:11:58PM +0200, ralf@dzie-ciuch.pl wrote: >> >> Hi, >> >> Thanks for help >> >> I new on it and I never use VPN, only I have to do it. >> Please tell me how to check peer's log? I dont know how to check it? > > If that's really a firewall-1 as said in comments, I just don't > know.... > > >> Have I change my racoon.conf exchange to aggressive, main? > > To just have it work, looks like you should just set "aggressive" > (stilla according to the comment in your configuration !!!). > > To have a correct setup with a correct security level, you should > change peer's configuration to use main mode, and just keep "main" as > exchange_mode in racoon's conf ! > > >> I forgot send last time - on the other side is cisco router, maybe this >> is >> important > > Ok, so this is not a firewall-1, but I still don't know how to get the > configuration or how to get logs...... > > > Yvan. > > _______________________________________________ > freebsd-net@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-net > To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"