Hi all, I have a problem to get a stable IPsec connection running from my OpenBSD 4.1 host to some kind of VPN appliance.
ike active esp from 192.168.27.0/24 to 192.168.0.0/16 \ local 223.150.201.44 peer 34.123.15.43 \ main auth hmac-md5 enc 3des group grp2 \ quick auth hmac-md5 enc aes group modp1024 \ psk "MySecretPassPhrase" ipsecctl -s all shows me the flows in and out and the SAD' too, and netstat -rn -f encap shows me a route too. But in /var/log/messages I see the following: Jun 15 07:56:15 vpn1 isakmpd[21808]: message_negotiate_sa: no compatible proposal found Jun 15 07:56:15 vpn1 isakmpd[21808]: dropped message from 34.123.15.43 port 500 due to notification type And after some minutes (or hours, don't know exactly) the tunnel is vanished from netstat -rn -f encap and ipsecctl -s all. How does the tunnel show up in the routing, and ipsecctl -s all, when "no compatible proposal found"? Do I can find out when I start with debug output, what the right proposal would be ? kind regards Sebastian