PS: If I don't define any remote networks in NCP client, then it tries
to send all ip traffic via esp to the OpenBSD gateway, but isakmpd
whoes:

responder_recv_HASH_SA_NONCE: peer proposed invalid phase 2 IDs: initiator id 
c0a801f9: 192.168.1.249, responder id 00000000/00000000: 0.0.0.0/0.0.0.0

The proposal packet contains

:
payload: ID len: 12 type: IPV4_ADDR = 192.168.1.249
payload: ID len: 16 type: IPV4_ADDR_SUBNET = 0.0.0.0/0.0.0.0 [ttl 0] (id 1, len 
872)
:


Regards

Harri

Reply via email to