Hum Qu est que ca veut dire ???

[moy_mike]

Bonjour a tous et a toutes, <BR> <BR>Voila je viens d essayer de monter un vpn entre 2 mnf mais j arrive pas a pinger l autre reseau !! <BR> <BR>En utilisant la commande ipsec look voici ce que j obtiens : <BR> <BR>vpnpa (pour vpn paris) <BR> <BR>[root@vpnpa admin]# ipsec look <BR>vpnpa.geci.net mar nov 18 16:12:00 CET 2003 <BR>192.168.15.0/24 -> 192.168.13.0/24 => %trap (0) <BR>ipsec0->eth1 mtu=16260(1500)->1500 <BR>0.0.0.0 195.101.138.254 0.0.0.0 UG 40 0 0 eth1 <BR>192.168.13.0 195.101.138.254 255.255.255.0 UG 40 0 0 ipsec0 <BR>195.101.138.0 0.0.0.0 255.255.255.0 U 40 0 0 eth1 <BR>195.101.138.0 0.0.0.0 255.255.255.0 U 40 0 0 ipsec0 <BR>Destination Gateway Genmask Flags MSS Window irtt Iface <BR> <BR> <BR>puis <BR>vpnve (pour vpn versailles) <BR> <BR>[root@vpnve admin]# ipsec look <BR>vpnve.versailles.geci.net mar nov 18 13:44:02 CET 2003 <BR>192.168.13.0/24 -> 192.168.15.0/24 => %hold (19) <BR>ipsec0->ppp0 mtu=16260(1492)->1492 <BR>0.0.0.0 194.51.205.52 0.0.0.0 UG 40 0 0 ppp0 <BR>192.168.15.0 194.51.205.52 255.255.255.0 UG 40 0 0 ipsec0 <BR>194.51.205.52 0.0.0.0 255.255.255.255 UH 40 0 0 ipsec0 <BR>194.51.205.52 0.0.0.0 255.255.255.255 UH 40 0 0 ppp0 <BR>Destination Gateway Genmask Flags MSS Window irtt Iface <BR> <BR> <BR>voila je m interroge en fait sur le %trp du paris et le %hold de celui de versailles?? <BR> <BR>Qu est ce que ca veut dire excatement??? <BR> <BR>Merci pour vos reponses!! <BR> <BR>Ps: d apres vous esc ce que le tableau de routae des 2 machines vous semble correct (en gros est ce que le vpn est bien monte) ?????? <BR> <BR>Merci d avance <BR> <BR>Cordialement <BR> <BR>Mickael TRIBUt

[moy_mike]

je viens de voir en plus que le %hold augmente enorment!!! <BR>

[moy_mike]

de plus dans mon /var/log/messages j ai les lignes suivantes : <BR> <BR>Nov 18 17:21:04 vpnpa ipsec__plutorun: 104 "versailles.geci.net-vpn" #1: STATE_MAIN_I1: initiate <BR>Nov 18 17:21:04 vpnpa ipsec__plutorun: 106 "versailles.geci.net-vpn" #1: STATE_MAIN_I2: sent MI2, expecting MR2 <BR>Nov 18 17:21:04 vpnpa ipsec__plutorun: 108 "versailles.geci.net-vpn" #1: STATE_MAIN_I3: sent MI3, expecting MR3 <BR>Nov 18 17:21:04 vpnpa ipsec__plutorun: 003 "versailles.geci.net-vpn" #1: discarding duplicate packet; already STATE_MAIN_I3 <BR>Nov 18 17:21:04 vpnpa ipsec__plutorun: 010 "versailles.geci.net-vpn" #1: STATE_MAIN_I3: retransmission; will wait 20s for response <BR>Nov 18 17:21:04 vpnpa ipsec__plutorun: 003 "versailles.geci.net-vpn" #1: discarding duplicate packet; already STATE_MAIN_I3 <BR>Nov 18 17:21:04 vpnpa ipsec__plutorun: 010 "versailles.geci.net-vpn" #1: STATE_MAIN_I3: retransmission; will wait 40s for response <BR>Nov 18 17:21:04 vpnpa ipsec__plutorun: 031 "versailles.geci.net-vpn" #1: max number of retransmissions (2) reached STATE_MAIN_I3. Possible authentication failure: no acceptable response to our first encrypted message <BR>Nov 18 17:21:04 vpnpa ipsec__plutorun: ...could not start conn "versailles.geci.net-vpn" <BR> <BR> <BR>HELP ME PLEASE <BR> <BR> <BR> <IMG SRC="images/smiles/icon_help.gif">