do i have to restart bgpd in order to get "ipsec esp ike" for a
session / nei working or is a reload and nei up/down enough?
i got
Oct 20 13:21:23 router-mt-1 isakmpd[13070]: dropped message from
xx.xx.xx.xx port 500 due to notification type NO_PROPOSAL_CHOSEN
and
responder_recv_HASH_SA_NONCE: peer proposed invalid phase 2 IDs:
initiator id 59caa34e: xxx.xxx.xxx.xxx, responder id 50be811a:
xx.xx.xxx.xxx
isakmpd is running with -Ka like suggested in man bgpd.conf and keys
have been copied to each side.
do i have anything forgotten?
Erich schrieb:
yes thx guys, it worked :)
Claudio Jeker schrieb:
On Thu, Feb 28, 2008 at 08:14:09AM +0100, Erich wrote:
i now have a session i turned on update loging ob bpgd but the
routes do not
get inserted. any ideas?
AS41412: update 123.123.123.0/24 via xxx.xxxx.xx.xxxx ( the router
where the network is, yes pingable)
Make sure the nexthop is either reachable via a static route or have a
look at "nexthop qualify via
erich
