ipsec retransminnion

[Vladimir Naprstek]

Anton Caniga napsal(a):
> 
> ipsec_setup: ...FreeS/WAN IPsec started
> ipsec__plutorun: 104 "test" #1: STATE_MAIN_I1: initiate
> ipsec__plutorun: 010 "test" #1: STATE_MAIN_I1: retransmission; will wait 20s 
> for response
> ipsec__plutorun: 010 "test" #1: STATE_MAIN_I1: retransmission; will wait 40s 
> for response
> ipsec__plutorun: 031 "test" #1: max number of retransmissions (2) reached 
> STATE_MAIN_I1.  No acceptable response to our first IKE message
> ipsec__plutorun: 000 "test" #1: starting keying attempt 2 of at most 3, but 
> releasing whack
> ipsec__plutorun: ...could not start conn "test"
> 
> ,ale interfaces ipsec0 mi  vytvori.
ipsec0 se udela pri startu ipsec. Pro testovani si do /etc/ipsec.conf 
dejte auto=add misto auto=start. Podivejte se, ze mate povoleny porty 
50/tcp, 51/tcp a 500/udp. A podivejte se na roota, byl tam o tom pekny 
serial, kde jsem tez mnoho cerpal.

> Takto vyzera vypis ipsec look:
> 
> 019216800100024:0:192.168.2.0/24:0   -> 192.168.1.0/24:0   => %trap:0 (0)
> ipsec0->eth0 mtu=16260(1500)->1500
> Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface
> 192.168.1.0     195.46.61.1     255.255.255.0   UG        0 0          0 
> ipsec0
> 195.46.61.0     0.0.0.0         255.255.255.0   U         0 0          0 
> ipsec0
> 
> Neviete mi poradit v com je problem.Ozaj a este jeden maly dotaz interfaces 
> ipsec0 a eth0 su uplne totozna je to normalne alebo som spravil niekde chybu.
> 
Je to normalni. Predstavte si to jako alias eth0, ktery zaridi sifrovani 
a pak to preda eth0 k poslani (velmi zhruba)...

-- 
Vladimír Náprstek
Severočeská plynárenská, a.s.
tel: 475 233 102
mail: vladimir.naprstek na scplyn.cz