Je veut installer un VPN entre un Zywall 10w et un IPcop 1.4rc4. Apres pas mal de galére le tunnel se crée bien mais je n'arrive pas a faire des pings d'un reseau a l'autre, ni quoi que ce soit d'ailleur !! quelqu'un c ?
Voici les log complé IPSEC ipcop :
17:23:41 pluto[22770] packet from 80.11.193.88:500: initial Main Mode message received on 193.252.31.37:500 but no connection has been authorized with policy=PSK
17:23:41 pluto[22770] packet from 80.11.193.88:500: ignoring Vendor ID payload [625027749d5ab97f5616c1602765cf480a3b7d0b]
17:23:33 pluto[22770] packet from 80.11.193.88:500: initial Main Mode message received on 193.252.31.37:500 but no connection has been authorized with policy=PSK
17:23:33 pluto[22770] packet from 80.11.193.88:500: ignoring Vendor ID payload [625027749d5ab97f5616c1602765cf480a3b7d0b]
17:23:29 pluto[22770] packet from 80.11.193.88:500: initial Main Mode message received on 193.252.31.37:500 but no connection has been authorized with policy=PSK
17:23:29 pluto[22770] packet from 80.11.193.88:500: ignoring Vendor ID payload [625027749d5ab97f5616c1602765cf480a3b7d0b]
17:23:27 pluto[22770] "RPV3C" #32: IPsec SA established
17:23:27 pluto[22770] "RPV3C" #32: transition from state STATE_QUICK_R1 to state STATE_QUICK_R2
17:23:27 pluto[22770] "RPV3C" #32: transition from state (null) to state STATE_QUICK_R1
17:23:27 pluto[22770] "RPV3C" #32: responding to Quick Mode
17:23:26 pluto[22770] "RPV3C" #31: sent MR3, ISAKMP SA established
17:23:26 pluto[22770] "RPV3C" #31: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
17:23:26 pluto[22770] "RPV3C" #31: Main mode peer ID is ID_IPV4_ADDR: '81.49.73.91'
17:23:26 pluto[22770] "RPV3C" #31: ignoring informational payload, type IPSEC_INITIAL_CONTACT
17:23:25 pluto[22770] "RPV3C" #31: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
17:23:24 pluto[22770] "RPV3C" #31: transition from state (null) to state STATE_MAIN_R1
17:23:24 pluto[22770] "RPV3C" #31: responding to Main Mode
17:23:24 pluto[22770] packet from 81.49.73.91:500: ignoring Vendor ID payload [625027749d5ab97f5616c1602765cf480a3b7d0b]
les log Zywall 10 w (il sont trop nul ! lol) :
10/01/2004 17:22:29 Rule [1] Tunnel built successfully 81.49.73.91 193.252.31.37 IKE
2 10/01/2004 17:22:29 Send:[HASH] 81.49.73.91 193.252.31.37 IKE
3 10/01/2004 17:22:29 Adjust TCP MSS to 1390 81.49.73.91 193.252.31.37 IKE
4 10/01/2004 17:22:29 Recv:[HASH][SA][NONCE][KE][ID][ID] 193.252.31.37 81.49.73.91 IKE
5 10/01/2004 17:22:29 Send:[HASH][SA][NONCE][KE][ID][ID] 81.49.73.91 193.252.31.37 IKE
6 10/01/2004 17:22:28 Phase 1 IKE SA process done 81.49.73.91 193.252.31.37 IKE
7 10/01/2004 17:22:28 Recv:[ID][HASH] 193.252.31.37 81.49.73.91 IKE
8 10/01/2004 17:22:28 Send:[ID][HASH][NOTFY:INIT_CONTACT] 81.49.73.91 193.252.31.37 IKE
9 10/01/2004 17:22:27 Recv:[KE][NONCE] 193.252.31.37 81.49.73.91 IKE
10 10/01/2004 17:22:27 Send:[KE][NONCE] 81.49.73.91 193.252.31.37 IKE
11 10/01/2004 17:22:26 Recv:[SA][VID] 193.252.31.37 81.49.73.91 IKE
12 10/01/2004 17:22:26 Send:[SA][VID] 81.49.73.91 193.252.31.37 IKE
13 10/01/2004 17:22:26 Send Main Mode request to [193.252.31.37] 81.49.73.91 193.252.31.37 IKE
14 10/01/2004 17:22:26 Rule [1] Sending IKE request
Pendant un ping, le tunnel se créer mais pas de reponse !!!