I've got the x509 certificate on to my Windows machine and have configured my LEAF 
box. When I try to establish a tunnel, I'm not getting thro'. I followed Nate 
Carlson's howto for win2k client set up. I'm not able to figure out why I'm getting 
incomplete ISAKMP error. barf output as below. Can I have some help on this please?

Mohan

Jan  3 14:33:05 firewall ipsec__plutorun: Starting Pluto subsystem...
Jan  3 14:33:05 firewall pluto[13586]: Starting Pluto (FreeS/WAN Version 1.99)
Jan  3 14:33:05 firewall pluto[13586]:   including X.509 patch (Version 0.9.15)
Jan  3 14:33:05 firewall pluto[13586]: Changing to directory '/etc/ipsec.d/cacerts'
Jan  3 14:33:05 firewall pluto[13586]:   loaded cacert file 'cacert.pem' (1700 bytes)
Jan  3 14:33:05 firewall pluto[13586]: Changing to directory '/etc/ipsec.d/crls'
Jan  3 14:33:05 firewall pluto[13586]:   loaded crl file 'crl.pem' (715 bytes)
Jan  3 14:33:05 firewall pluto[13586]:   loaded my default X.509 cert file 
'/etc/x509cert.der' (1245 bytes)
Jan  3 14:33:06 firewall pluto[13586]: added connection description "w2k-road-warriors"
Jan  3 14:33:06 firewall pluto[13586]: listening for IKE messages
Jan  3 14:33:06 firewall pluto[13586]: adding interface ipsec0/eth0 202.91.64.181
Jan  3 14:33:06 firewall pluto[13586]: loading secrets from "/etc/ipsec.secrets"
Jan  3 15:01:55 firewall pluto[13586]: packet from 202.91.64.132:500: ignoring Vendor 
ID payload
Jan  3 15:01:55 firewall pluto[13586]: "w2k-road-warriors"[1] 202.91.64.132 #1: 
responding to Main Mode from unknown peer 202.91.64.132
Jan  3 15:01:56 firewall pluto[13586]: "w2k-road-warriors"[1] 202.91.64.132 #1: 
encrypted Informational Exchange message is invalid because it is for incomplete 
ISAKMP SA


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html

Reply via email to