[Ossi]

Hallo !

Ich habe mit einem VPN-Router(Netgear FVS114). Irgendwie kommt er nicht über die 2. Phase hinhaus .(Mit und AH und EPS gehts nicht !)

Hier mal meine Log !

 8-21: 17:45:04.250 My Connections\actera - Attempting to resolve Hostname (****.dyndns.org)
 8-21: 17:45:04.312 
 8-21: 17:45:04.312 My Connections\actera - Initiating IKE Phase 1 (Hostname=****.dyndns.org) (IP ADDR=**.***.***.***)
 8-21: 17:45:04.609 My Connections\actera - SENDING>>>> ISAKMP OAK AG (SA, KE, NON, ID, VID 6x)
 8-21: 17:45:07.640 My Connections\actera - RECEIVED<<< ISAKMP OAK AG (SA, KE, NON, ID, HASH)
 8-21: 17:45:07.890 My Connections\actera - Using cached address.  (Hostname=****.dyndns.org) (IP ADDR=**.***.***.***)
 8-21: 17:45:07.890 My Connections\actera - SENDING>>>> ISAKMP OAK AG *(HASH, NOTIFY:STATUS_REPLAY_STATUS, NOTIFY:STATUS_INITIAL_CONTACT)
 8-21: 17:45:07.890 My Connections\actera - Established IKE SA
 8-21: 17:45:07.890 My Connections\actera -   MY COOKIE 69 b5 9d 9f e6 1b 99 4f
 8-21: 17:45:07.890 My Connections\actera -   HIS COOKIE f2 c4 f4 59 23 b3 80 70
 8-21: 17:45:07.968 My Connections\actera - Initiating IKE Phase 2 with Client IDs (message id: EB0E46F5)
 8-21: 17:45:07.968 My Connections\actera -   Initiator = IP ADDR=192.168.1.7, prot = 0 port = 0
 8-21: 17:45:07.968 My Connections\actera -   Responder = IP SUBNET/MASK=192.168.100.0/255.255.255.0, prot = 0 port = 0
 8-21: 17:45:07.968 My Connections\actera - SENDING>>>> ISAKMP OAK QM *(HASH, SA, NON, ID 2x)
 8-21: 17:45:11.796 My Connections\actera - RECEIVED<<< ISAKMP OAK AG (Retransmission)
 8-21: 17:45:16.796 My Connections\actera - RECEIVED<<< ISAKMP OAK AG (Retransmission)
 8-21: 17:45:21.796 My Connections\actera - RECEIVED<<< ISAKMP OAK AG (Retransmission)
 8-21: 17:45:23.609 My Connections\actera - QM re-keying timed out. Retry count: 1
 8-21: 17:45:23.609 My Connections\actera - SENDING>>>> ISAKMP OAK QM *(Retransmission)
 8-21: 17:45:26.781 My Connections\actera - RECEIVED<<< ISAKMP OAK INFO (DEL)
 8-21: 17:45:26.781 My Connections\actera - Deleting IKE SA (IP ADDR=**.***.***.***)
 8-21: 17:45:26.781 My Connections\actera -   MY COOKIE 69 b5 9d 9f e6 1b 99 4f
 8-21: 17:45:26.781 My Connections\actera -   HIS COOKIE f2 c4 f4 59 23 b3 80 70

Ossi



EDIT:

In der 2. Phase habe ich jetzt das, obwohl ich nichts geändert habe !

 8-21: 17:58:54.000 My Connections\actera - Initiating IKE Phase 2 with Client IDs (message id: BE3868D6)
 8-21: 17:58:54.000 My Connections\actera -   Initiator = IP ADDR=192.168.1.7, prot = 0 port = 0
 8-21: 17:58:54.000 My Connections\actera -   Responder = IP SUBNET/MASK=192.168.100.0/255.255.255.0, prot = 0 port = 0
 8-21: 17:58:54.000 My Connections\actera - SENDING>>>> ISAKMP OAK QM *(HASH, SA, NON, ID 2x)
 8-21: 17:59:09.421 My Connections\actera - QM re-keying timed out. Retry count: 1
 8-21: 17:59:09.421 My Connections\actera - SENDING>>>> ISAKMP OAK QM *(Retransmission)
 8-21: 17:59:24.421 My Connections\actera - QM re-keying timed out. Retry count: 2
 8-21: 17:59:24.421 My Connections\actera - SENDING>>>> ISAKMP OAK QM *(Retransmission)
 8-21: 17:59:39.421 My Connections\actera - QM re-keying timed out. Retry count: 3
 8-21: 17:59:39.421 My Connections\actera - SENDING>>>> ISAKMP OAK QM *(Retransmission)
 8-21: 17:59:54.421 My Connections\actera - Exceeded 3 attempts (message id: BE3868D6)
 8-21: 17:59:54.421 My Connections\actera - Disconnecting IKE SA negotiation
 8-21: 17:59:54.437 My Connections\actera - Deleting IKE SA (IP ADDR=84.143.113.123)
 8-21: 17:59:54.437 My Connections\actera -   MY COOKIE 25 18 c 5e 9c cd d8 af
 8-21: 17:59:54.437 My Connections\actera -   HIS COOKIE 4d ab 3e a3 a7 c4 a7 d2
 8-21: 17:59:54.437 My Connections\actera - SENDING>>>> ISAKMP OAK INFO *(HASH, DEL)

EDIT2:

Hier ist die log des routers !!

[2007-08-21 08:02:12][==== IKE PHASE 1(from 85.177.222.133) START (responder) ====]
[2007-08-21 08:02:12]**** RECEIVED  FIRST MESSAGE OF AGGR MODE **** 
[2007-08-21 08:02:12]<POLICY: > PAYLOADS: SA,PROP,TRANS,KE,NONCE,ID,VID,VID,VID,VID,VID,VID
[2007-08-21 08:02:12]<LocalRID> Type=ID_USER_FQDN,ID Data=Client 
[2007-08-21 08:02:12]<RemoteLID> Type=ID_USER_FQDN,ID Data=Client 
[2007-08-21 08:02:12]<POLICY: actera> PAYLOADS: SA,PROP,TRANS,KE,NONCE,ID,HASH
[2007-08-21 08:02:12]**** SENT OUT SECOND MESSAGE OF AGGR MODE **** 
[2007-08-21 08:02:12]**** RECEIVED  THIRD MESSAGE OF AGGR MODE **** 
[2007-08-21 08:02:12]<POLICY: actera> PAYLOADS: HASH,NOTIFY,NOTIFY
[2007-08-21 08:02:12]**** AGGR MODE COMPLETED **** 
[2007-08-21 08:02:12][==== IKE PHASE 1 ESTABLISHED====]
[2007-08-21 08:02:12][==== IKE PHASE 2(from 85.177.222.133) START (responder) ====]
[2007-08-21 08:02:12]**** RECEIVED  FIRST MESSAGE OF QUICK MODE **** 
[2007-08-21 08:02:12]**** FOUND IDs,EXTRACE ID INFO ****
[2007-08-21 08:02:12]<Initiator IPADDR=192.168.1.7>
[2007-08-21 08:02:12]<Responder IPADDR=192.168.100.0 MASK=255.255.255.0>
[2007-08-21 08:02:28][==== IKE PHASE 2(from 85.177.222.133) START (responder) ====]
[2007-08-21 08:02:28]**** RECEIVED  FIRST MESSAGE OF QUICK MODE **** 
[2007-08-21 08:02:28]**** FOUND IDs,EXTRACE ID INFO ****
[2007-08-21 08:02:28]<Initiator IPADDR=192.168.1.7>
[2007-08-21 08:02:28]<Responder IPADDR=192.168.100.0 MASK=255.255.255.0>
[2007-08-21 08:02:35]**** RECEIVED IKE DELETE PAYLOAD ****
[2007-08-21 08:02:35]**** Deleting ISAKMP SA ****

Dieser Beitrag wurde von Ossi bearbeitet: 21. August 2007 - 17:05