Telecom Italia & Client VPN

Virtual private networks e affini

Moderatore: Federico.Lagni

Rispondi
ketVet
Cisco power user
Messaggi: 90
Iscritto il: gio 14 lug , 2005 6:59 pm

Un saluto a tutti, da circa due settimane, non riesco più a collegarmi tramite il Cisco VPN Client al mio router C837; la configurazione non è cambiata e la trovate in allegato, possibile che Telecom mi filtri il traffico?

I debug che ho abilitato debug crypto isakmp e debug crypto ipsec in fase di connessione restituiscono quanto seguono:
Sep 14 07:54:18.854: ISAKMP (0:0): received packet from 255.255.255.255 dport 500 sport 23374 Global (N) NEW SA
Sep 14 07:54:18.858: ISAKMP: Created a peer struct for 255.255.255.255, peer port 23374
Sep 14 07:54:18.858: ISAKMP: New peer created peer = 0x8261E084 peer_handle = 0x80000004
Sep 14 07:54:18.858: ISAKMP: Locking peer struct 0x8261E084, IKE refcount 1 for crypto_isakmp_process_block
Sep 14 07:54:18.858: ISAKMP:(0:0:N/A:0):Setting client config settings 82421C0C
Sep 14 07:54:18.858: ISAKMP: local port 500, remote port 23374
Sep 14 07:54:18.862: insert sa successfully sa = 825C51C8
Sep 14 07:54:18.862: ISAKMP:(0:0:N/A:0): processing SA payload. message ID = 0
Sep 14 07:54:18.862: ISAKMP:(0:0:N/A:0): processing ID payload. message ID = 0
Sep 14 07:54:18.862: ISAKMP (0:0): ID payload
next-payload : 13
type : 11
group id : REMOTE_VPN
protocol : 17
port : 500
length : 18
Sep 14 07:54:18.862: ISAKMP:(0:0:N/A:0):: peer matches *none* of the profiles
Sep 14 07:54:18.866: ISAKMP:(0:0:N/A:0): processing vendor id payload
Sep 14 07:54:18.866: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 215 mismatch
Sep 14 07:54:18.866: ISAKMP:(0:0:N/A:0): vendor ID is XAUTH
Sep 14 07:54:18.866: ISAKMP:(0:0:N/A:0): processing vendor id payload
Sep 14 07:54:18.866: ISAKMP:(0:0:N/A:0): vendor ID is DPD
Sep 14 07:54:18.866: ISAKMP:(0:0:N/A:0): processing vendor id payload
Sep 14 07:54:18.866: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 194 mismatch
Sep 14 07:54:18.870: ISAKMP:(0:0:N/A:0): processing vendor id payload
Sep 14 07:54:18.870: ISAKMP:(0:0:N/A:0): vendor ID seems Unity/DPD but major 123 mismatch
Sep 14 07:54:18.870: ISAKMP:(0:0:N/A:0): vendor ID is NAT-T v2
Sep 14 07:54:18.870: ISAKMP:(0:0:N/A:0): processing vendor id payload
Sep 14 07:54:18.870: ISAKMP:(0:0:N/A:0): vendor ID is Unity
Sep 14 07:54:18.870: ISAKMP : Scanning profiles for xauth ...
Sep 14 07:54:18.870: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 1 against priority 7 policy
Sep 14 07:54:18.870: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.874: ISAKMP: hash SHA
Sep 14 07:54:18.874: ISAKMP: default group 2
Sep 14 07:54:18.874: ISAKMP: auth XAUTHInitPreShared
Sep 14 07:54:18.874: ISAKMP: life type in seconds
Sep 14 07:54:18.874: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.874: ISAKMP: keylength of 256
Sep 14 07:54:18.874: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.874: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.874: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 2 against priority 7 policy
Sep 14 07:54:18.878: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.878: ISAKMP: hash MD5
Sep 14 07:54:18.878: ISAKMP: default group 2
Sep 14 07:54:18.878: ISAKMP: auth XAUTHInitPreShared
Sep 14 07:54:18.878: ISAKMP: life type in seconds
Sep 14 07:54:18.878: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.878: ISAKMP: keylength of 256
Sep 14 07:54:18.878: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.878: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.882: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 3 against priority 7 policy
Sep 14 07:54:18.882: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.882: ISAKMP: hash SHA
Sep 14 07:54:18.882: ISAKMP: default group 2
Sep 14 07:54:18.882: ISAKMP: auth pre-share
Sep 14 07:54:18.882: ISAKMP: life type in seconds
Sep 14 07:54:18.882: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.882: ISAKMP: keylength of 256
Sep 14 07:54:18.886: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.886: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.886: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 4 against priority 7 policy
Sep 14 07:54:18.886: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.886: ISAKMP: hash MD5
Sep 14 07:54:18.886: ISAKMP: default group 2
Sep 14 07:54:18.886: ISAKMP: auth pre-share
Sep 14 07:54:18.886: ISAKMP: life type in seconds
Sep 14 07:54:18.886: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.890: ISAKMP: keylength of 256
Sep 14 07:54:18.890: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.890: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.890: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 5 against priority 7 policy
Sep 14 07:54:18.890: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.890: ISAKMP: hash SHA
Sep 14 07:54:18.890: ISAKMP: default group 2
Sep 14 07:54:18.890: ISAKMP: auth XAUTHInitPreShared
Sep 14 07:54:18.890: ISAKMP: life type in seconds
Sep 14 07:54:18.894: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.894: ISAKMP: keylength of 128
Sep 14 07:54:18.894: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.894: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.894: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 6 against priority 7 policy
Sep 14 07:54:18.894: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.894: ISAKMP: hash MD5
Sep 14 07:54:18.894: ISAKMP: default group 2
Sep 14 07:54:18.894: ISAKMP: auth XAUTHInitPreShared
Sep 14 07:54:18.898: ISAKMP: life type in seconds
Sep 14 07:54:18.898: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.898: ISAKMP: keylength of 128
Sep 14 07:54:18.898: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.898: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.898: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 7 against priority 7 policy
Sep 14 07:54:18.898: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.898: ISAKMP: hash SHA
Sep 14 07:54:18.902: ISAKMP: default group 2
Sep 14 07:54:18.902: ISAKMP: auth pre-share
Sep 14 07:54:18.902: ISAKMP: life type in seconds
Sep 14 07:54:18.902: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.902: ISAKMP: keylength of 128
Sep 14 07:54:18.902: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.902: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.902: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 8 against priority 7 policy
Sep 14 07:54:18.906: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.906: ISAKMP: hash MD5
Sep 14 07:54:18.906: ISAKMP: default group 2
Sep 14 07:54:18.906: ISAKMP: auth pre-share
Sep 14 07:54:18.906: ISAKMP: life type in seconds
Sep 14 07:54:18.906: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.906: ISAKMP: keylength of 128
Sep 14 07:54:18.906: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.906: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.910: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 9 against priority 7 policy
Sep 14 07:54:18.910: ISAKMP: encryption 3DES-CBC
Sep 14 07:54:18.910: ISAKMP: hash SHA
Sep 14 07:54:18.910: ISAKMP: default group 2
Sep 14 07:54:18.910: ISAKMP: auth XAUTHInitPreShared
Sep 14 07:54:18.910: ISAKMP: life type in seconds
Sep 14 07:54:18.910: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.910: ISAKMP:(0:0:N/A:0):Xauth authentication by pre-shared key offered but does not match policy!
Sep 14 07:54:18.910: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.914: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 10 against priority 7 policy
Sep 14 07:54:18.914: ISAKMP: encryption 3DES-CBC
Sep 14 07:54:18.914: ISAKMP: hash MD5
Sep 14 07:54:18.914: ISAKMP: default group 2
Sep 14 07:54:18.914: ISAKMP: auth XAUTHInitPreShared
Sep 14 07:54:18.914: ISAKMP: life type in seconds
Sep 14 07:54:18.914: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.914: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
Sep 14 07:54:18.918: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.918: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 11 against priority 7 policy
Sep 14 07:54:18.918: ISAKMP: encryption 3DES-CBC
Sep 14 07:54:18.918: ISAKMP: hash SHA
Sep 14 07:54:18.918: ISAKMP: default group 2
Sep 14 07:54:18.918: ISAKMP: auth pre-share
Sep 14 07:54:18.918: ISAKMP: life type in seconds
Sep 14 07:54:18.918: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.922: ISAKMP:(0:0:N/A:0):Preshared authentication offered but does not match policy!
Sep 14 07:54:18.922: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.922: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 12 against priority 7 policy
Sep 14 07:54:18.922: ISAKMP: encryption 3DES-CBC
Sep 14 07:54:18.922: ISAKMP: hash MD5
Sep 14 07:54:18.922: ISAKMP: default group 2
Sep 14 07:54:18.922: ISAKMP: auth pre-share
Sep 14 07:54:18.922: ISAKMP: life type in seconds
Sep 14 07:54:18.922: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.926: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
Sep 14 07:54:18.926: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.926: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 13 against priority 7 policy
Sep 14 07:54:18.926: ISAKMP: encryption DES-CBC
Sep 14 07:54:18.926: ISAKMP: hash MD5
Sep 14 07:54:18.926: ISAKMP: default group 2
Sep 14 07:54:18.926: ISAKMP: auth XAUTHInitPreShared
Sep 14 07:54:18.930: ISAKMP: life type in seconds
Sep 14 07:54:18.930: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.930: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.930: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.930: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 14 against priority 7 policy
Sep 14 07:54:18.930: ISAKMP: encryption DES-CBC
Sep 14 07:54:18.930: ISAKMP: hash MD5
Sep 14 07:54:18.934: ISAKMP: default group 2
Sep 14 07:54:18.934: ISAKMP: auth pre-share
Sep 14 07:54:18.934: ISAKMP: life type in seconds
Sep 14 07:54:18.934: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.934: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.934: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 0
Sep 14 07:54:18.934: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 1 against priority 65535 policy
Sep 14 07:54:18.934: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.938: ISAKMP: hash SHA
Sep 14 07:54:18.938: ISAKMP: default group 2
Sep 14 07:54:18.938: ISAKMP: auth XAUTHInitPreShared
Sep 14 07:54:18.938: ISAKMP: life type in seconds
Sep 14 07:54:18.938: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.938: ISAKMP: keylength of 256
Sep 14 07:54:18.938: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.938: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.938: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 2 against priority 65535 policy
Sep 14 07:54:18.942: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.942: ISAKMP: hash MD5
Sep 14 07:54:18.942: ISAKMP: default group 2
Sep 14 07:54:18.942: ISAKMP: auth XAUTHInitPreShared
Sep 14 07:54:18.942: ISAKMP: life type in seconds
Sep 14 07:54:18.942: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.946: ISAKMP: keylength of 256
Sep 14 07:54:18.946: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.946: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.946: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 3 against priority 65535 policy
Sep 14 07:54:18.946: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.946: ISAKMP: hash SHA
Sep 14 07:54:18.946: ISAKMP: default group 2
Sep 14 07:54:18.946: ISAKMP: auth pre-share
Sep 14 07:54:18.946: ISAKMP: life type in seconds
Sep 14 07:54:18.950: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.950: ISAKMP: keylength of 256
Sep 14 07:54:18.950: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.950: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.950: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 4 against priority 65535 policy
Sep 14 07:54:18.950: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.950: ISAKMP: hash MD5
Sep 14 07:54:18.950: ISAKMP: default group 2
Sep 14 07:54:18.950: ISAKMP: auth pre-share
Sep 14 07:54:18.954: ISAKMP: life type in seconds
Sep 14 07:54:18.954: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.954: ISAKMP: keylength of 256
Sep 14 07:54:18.954: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.954: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.954: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 5 against priority 65535 policy
Sep 14 07:54:18.954: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.954: ISAKMP: hash SHA
Sep 14 07:54:18.958: ISAKMP: default group 2
Sep 14 07:54:18.958: ISAKMP: auth XAUTHInitPreShared
Sep 14 07:54:18.958: ISAKMP: life type in seconds
Sep 14 07:54:18.958: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.958: ISAKMP: keylength of 128
Sep 14 07:54:18.958: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.962: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.962: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 6 against priority 65535 policy
Sep 14 07:54:18.962: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.962: ISAKMP: hash MD5
Sep 14 07:54:18.962: ISAKMP: default group 2
Sep 14 07:54:18.962: ISAKMP: auth XAUTHInitPreShared
Sep 14 07:54:18.962: ISAKMP: life type in seconds
Sep 14 07:54:18.962: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.962: ISAKMP: keylength of 128
Sep 14 07:54:18.966: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.966: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.966: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 7 against priority 65535 policy
Sep 14 07:54:18.966: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.966: ISAKMP: hash SHA
Sep 14 07:54:18.966: ISAKMP: default group 2
Sep 14 07:54:18.966: ISAKMP: auth pre-share
Sep 14 07:54:18.966: ISAKMP: life type in seconds
Sep 14 07:54:18.966: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.970: ISAKMP: keylength of 128
Sep 14 07:54:18.970: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.970: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.970: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 8 against priority 65535 policy
Sep 14 07:54:18.970: ISAKMP: encryption AES-CBC
Sep 14 07:54:18.970: ISAKMP: hash MD5
Sep 14 07:54:18.970: ISAKMP: default group 2
Sep 14 07:54:18.970: ISAKMP: auth pre-share
Sep 14 07:54:18.970: ISAKMP: life type in seconds
Sep 14 07:54:18.970: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.974: ISAKMP: keylength of 128
Sep 14 07:54:18.974: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.974: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.974: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 9 against priority 65535 policy
Sep 14 07:54:18.978: ISAKMP: encryption 3DES-CBC
Sep 14 07:54:18.978: ISAKMP: hash SHA
Sep 14 07:54:18.978: ISAKMP: default group 2
Sep 14 07:54:18.978: ISAKMP: auth XAUTHInitPreShared
Sep 14 07:54:18.978: ISAKMP: life type in seconds
Sep 14 07:54:18.978: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.978: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.978: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.982: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 10 against priority 65535 policy
Sep 14 07:54:18.982: ISAKMP: encryption 3DES-CBC
Sep 14 07:54:18.982: ISAKMP: hash MD5
Sep 14 07:54:18.982: ISAKMP: default group 2
Sep 14 07:54:18.982: ISAKMP: auth XAUTHInitPreShared
Sep 14 07:54:18.982: ISAKMP: life type in seconds
Sep 14 07:54:18.982: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.982: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.982: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.986: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 11 against priority 65535 policy
Sep 14 07:54:18.986: ISAKMP: encryption 3DES-CBC
Sep 14 07:54:18.986: ISAKMP: hash SHA
Sep 14 07:54:18.986: ISAKMP: default group 2
Sep 14 07:54:18.986: ISAKMP: auth pre-share
Sep 14 07:54:18.986: ISAKMP: life type in seconds
Sep 14 07:54:18.986: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.986: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.990: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.990: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 12 against priority 65535 policy
Sep 14 07:54:18.990: ISAKMP: encryption 3DES-CBC
Sep 14 07:54:18.990: ISAKMP: hash MD5
Sep 14 07:54:18.990: ISAKMP: default group 2
Sep 14 07:54:18.990: ISAKMP: auth pre-share
Sep 14 07:54:18.990: ISAKMP: life type in seconds
Sep 14 07:54:18.994: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.994: ISAKMP:(0:0:N/A:0):Encryption algorithm offered does not match policy!
Sep 14 07:54:18.994: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.994: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 13 against priority 65535 policy
Sep 14 07:54:18.994: ISAKMP: encryption DES-CBC
Sep 14 07:54:18.994: ISAKMP: hash MD5
Sep 14 07:54:18.994: ISAKMP: default group 2
Sep 14 07:54:18.994: ISAKMP: auth XAUTHInitPreShared
Sep 14 07:54:18.998: ISAKMP: life type in seconds
Sep 14 07:54:18.998: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:18.998: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
Sep 14 07:54:18.998: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 3
Sep 14 07:54:18.998: ISAKMP:(0:0:N/A:0):Checking ISAKMP transform 14 against priority 65535 policy
Sep 14 07:54:18.998: ISAKMP: encryption DES-CBC
Sep 14 07:54:18.998: ISAKMP: hash MD5
Sep 14 07:54:18.998: ISAKMP: default group 2
Sep 14 07:54:19.002: ISAKMP: auth pre-share
Sep 14 07:54:19.002: ISAKMP: life type in seconds
Sep 14 07:54:19.002: ISAKMP: life duration (VPI) of 0x0 0x20 0xC4 0x9B
Sep 14 07:54:19.002: ISAKMP:(0:0:N/A:0):Hash algorithm offered does not match policy!
Sep 14 07:54:19.002: ISAKMP:(0:0:N/A:0):atts are not acceptable. Next payload is 0
Sep 14 07:54:19.006: ISAKMP:(0:0:N/A:0):no offers accepted!
Sep 14 07:54:19.006: ISAKMP:(0:0:N/A:0): phase 1 SA policy not acceptable! (local 81.74.72.86 remote 255.255.255.255)
Sep 14 07:54:19.006: ISAKMP (0:0): incrementing error counter on sa, attempt 1 of 5: construct_fail_ag_init
Sep 14 07:54:19.006: ISAKMP:(0:0:N/A:0): sending packet to 255.255.255.255 my_port 500 peer_port 23374 (R) AG_NO_STATE
Sep 14 07:54:19.006: ISAKMP:(0:0:N/A:0):peer does not do paranoid keepalives.

Sep 14 07:54:19.010: ISAKMP:(0:0:N/A:0):deleting SA reason "Phase1 SA policy proposal not accepted" state (R) AG_NO_STATE (peer 255.255.255.255)
Sep 14 07:54:19.010: ISAKMP:(0:0:N/A:0): processing KE payload. message ID = 0
Sep 14 07:54:19.010: ISAKMP:(0:0:N/A:0): group size changed! Should be 0, is 128
Sep 14 07:54:19.010: ISAKMP (0:0): incrementing error counter on sa, attempt 2 of 5: reset_retransmission
Sep 14 07:54:19.010: ISAKMP (0:0): Unknown Input IKE_MESG_FROM_PEER, IKE_AM_EXCH: state = IKE_READY
Sep 14 07:54:19.014: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_FROM_PEER, IKE_AM_EXCH
Sep 14 07:54:19.014: ISAKMP:(0:0:N/A:0):Old State = IKE_READY New State = IKE_READY

Sep 14 07:54:19.014: %CRYPTO-6-IKMP_MODE_FAILURE: Processing of Aggressive mode failed with peer at 255.255.255.255
Sep 14 07:54:19.018: ISAKMP:(0:0:N/A:0):deleting SA reason "Phase1 SA policy proposal not accepted" state (R) AG_NO_STATE (peer 255.255.255.255)
Sep 14 07:54:19.018: ISAKMP: Unlocking IKE struct 0x8261E084 for isadb_mark_sa_deleted(), count 0
Sep 14 07:54:19.018: ISAKMP: Deleting peer node by peer_reap for 255.255.255.255: 8261E084
Sep 14 07:54:19.022: ISAKMP:(0:0:N/A:0):Input = IKE_MESG_INTERNAL, IKE_PHASE1_DEL
Sep 14 07:54:19.022: ISAKMP:(0:0:N/A:0):Old State = IKE_READY New State = IKE_DEST_SA

Sep 14 07:54:19.022: IPSEC(key_engine): got a queue event with 1 kei messages
Sep 14 07:54:24.050: ISAKMP (0:0): received packet from 255.255.255.255 dport 500 sport 23374 Global (R) MM_NO_STATE
Sep 14 07:54:29.550: ISAKMP (0:0): received packet from 255.255.255.255 dport 500 sport 23374 Global (R) MM_NO_STATE
Sep 14 07:54:34.550: ISAKMP (0:0): received packet from 255.255.255.255 dport 500 sport 23374 Global (R) MM_NO_STATE
Ho sostituito il peer remoto da cui provo a connettermi con 255.255.255.255.

Grazie a chiunque mi illumini su cosa può essere.
Non hai i permessi necessari per visualizzare i file allegati in questo messaggio.
Top
Avatar utente
Wizard
Intergalactic subspace network admin
Messaggi: 3441
Iscritto il: ven 03 feb , 2006 10:04 am
Località: Emilia Romagna
Contatta:
Contatta Wizard

Hai poi risolto?
Prova a cambiare transform-set
Il futuro è fatto di persone che hanno delle intuizioni e visioni .....sono quelle persone che fanno la differenza...... quelle dotate di un TERZO OCCHIO....
Top
ketVet
Cisco power user
Messaggi: 90
Iscritto il: gio 14 lug , 2005 6:59 pm

Il problema si è ripresentato ma, ho seguito il tuo consiglio, quello di cambiare il transform-set ed ora funziona! Stiamo a vedere!
Grazie!
Top
Rispondi

Torna a “VPN”