Добрый день!
Пытаюсь поднять туннель DFL-860E и Centos, собственно не выходит
Вроде как первую стадию проходит, дальше не в какую.
На стороне CentOS следующие ошибки
Код:
Jul 7 12:22:38 gate racoon: INFO: 62.32.86.XXX[500] used as isakmp port (fd=19)
Jul 7 12:22:38 gate racoon: INFO: 62.32.86.XXX[500] used for NAT-T
Jul 7 12:22:44 gate racoon: INFO: respond new phase 1 negotiation: 62.32.86.138[500]<=>77.220.184.82[500]
Jul 7 12:22:44 gate racoon: INFO: begin Identity Protection mode.
Jul 7 12:22:44 gate racoon: WARNING: ignore INITIAL-CONTACT notification, because it is only accepted after phase1.
Jul 7 12:22:44 gate racoon: INFO: ISAKMP-SA established 62.32.86.XXX[500]-77.220.184.XXX[500] spi:66bcb6fb8381ee80:f6d1ecb54809dc4a
Jul 7 12:22:44 gate racoon: INFO: respond new phase 2 negotiation: 62.32.86.XXX[500]<=>77.220.184.XXX[500]
Jul 7 12:22:44 gate racoon: ERROR: not matched
Jul 7 12:22:44 gate racoon: ERROR: no suitable policy found.
Jul 7 12:22:44 gate racoon: ERROR: failed to pre-process packet.
Jul 7 12:22:45 gate racoon: ERROR: couldn't find configuration.
На стороне DFL-860E следующие
Код:
ike_sa_destroyed
ike_sa_killed
ike_sa=" Initiator SPI ESP=0x2e286aef, AH=0xd39c2271, IPComp=0x5222486"
psec_sa_statistics
done=625 success=0 failed=625
ike_quickmode_failed
local_ip=77.220.184.XXX remote_ip=62.32.86.XXX cookies=2e286aefd39c22715222486154c23818 reason="Aborted notification"
Warning IPSEC
ipsec_sa_failed
no_ipsec_sa
statusmsg="Aborted notification"
ipsec_event
message=" Remote Proxy ID 192.168.1.0/24 any"
sec_event
message=" Local Proxy ID 192.168.10.0/24 any"
ike_sa_negotiation_completed
ike_sa_completed
local_peer="77.220.184.XXX ID 77.220.184.XXX" remote_peer="62.32.86.XXX ID 62.32.86.XXX" initiator_spi="2e286aef d39c2271" responder_spi="52224861 54c23818"
Настройки CentOS
Код:
cat /etc/racoon/racoon.conf
path include "/etc/racoon";
path pre_shared_key "/etc/racoon/psk.txt";
path certificate "/etc/racoon/certs";
log debug2;
listen
{
isakmp 62.32.86.XXX;
}
timer
{
# These value can be changed per remote node.
counter 5; # maximum trying count to send.
interval 20 sec; # maximum interval to resend.
persend 1; # the number of packets per send.
# maximum time to wait for completing each phase.
phase1 30 sec;
phase2 15 sec;
}
sainfo anonymous
{
pfs_group 2;
lifetime time 1 hour ;
encryption_algorithm des ;
authentication_algorithm hmac_md5 ;
compression_algorithm deflate ;
}
include "/etc/racoon/77.220.184.XXX.conf";
cat /etc/racoon/77.220.184.XXX.conf
remote 77.220.184.XXX
{
exchange_mode main, aggressive;
my_identifier address;
proposal {
encryption_algorithm des;
hash_algorithm sha1;
authentication_method pre_shared_key;
dh_group 2;
}
}
Не как не могу понять в чем проблема