Добрый день! Поменял подсети, подключение вообще перестало устанавливаться. В логах:
Код:
2012-02-08
08:33:41 Info IPSEC
1803021
ipsec_sa_statistics
done=987 success=0 failed=987
2012-02-08
08:33:41 Warning IPSEC
1800109
ike_quickmode_failed
local_ip=92.50.181.14 remote_ip=77.94.122.54 cookies=e1f15fefbbc9a698796191976374c73f reason="No proposal chosen"
2012-02-08
08:33:41 Warning IPSEC
1803020
ipsec_sa_failed
no_ipsec_sa
statusmsg="No proposal chosen"
2012-02-08
08:33:41 Info IPSEC
1800102
ipsec_event
message=" Remote Proxy ID 192.168.11.0/24 any"
2012-02-08
08:33:41 Info IPSEC
1800102
ipsec_event
message=" Local Proxy ID 192.168.0.0/16 any"
2012-02-08
08:33:41 Info IPSEC
1802703
ike_sa_negotiation_completed
ike_sa_completed
local_peer="92.50.181.14 ID 92.50.181.14" remote_peer="77.94.122.54 ID 77.94.122.54" initiator_spi="e1f15fef bbc9a698" responder_spi="79619197 6374c73f" int_severity=6
2012-02-08
08:33:41 Info IPSEC
1800102
ipsec_event
message="IPsec SA [Responder] negotiation failed:"
2012-02-08
08:33:41 Notice IPSEC
1802300
rule_selection_failed
info="Quick-Mode local ID mismatch" int_severity=6
2012-02-08
08:33:41 Info IPSEC
1803001
failed_to_select_policy_rule
2012-02-08
08:33:41 Warning IPSEC
1800102
ipsec_event
message=" Remote Proxy ID 192.168.11.0/24 any"
2012-02-08
08:33:41 Warning IPSEC
1800102
ipsec_event
message=" Local Proxy ID 192.168.0.0/16 any"
2012-02-08
08:33:41 Info IPSEC
1802703
ike_sa_negotiation_completed
ike_sa_completed
local_peer="92.50.181.14 ID 92.50.181.14" remote_peer="77.94.122.54 ID 77.94.122.54" initiator_spi="e1f15fef bbc9a698" responder_spi="79619197 6374c73f" int_severity=4
2012-02-08
08:33:41 Warning IPSEC
1800102
ipsec_event
message="IPsec SA [Responder] negotiation failed:"
2012-02-08
08:33:41 Info IPSEC
1803024
xauth_exchange_done
statusmsg="Authentication failed"
2012-02-08
08:33:32 Warning IPSEC
1800106
ike_invalid_payload
local_ip=92.50.181.14 remote_ip=77.94.122.54 cookies=e1f15fefbbc9a698796191976374c73f reason="Delete payload contains invalid protocol id"
2012-02-08
08:32:50 Info IPSEC
1803024
xauth_exchange_done
statusmsg="Authentication failed"
2012-02-08
08:32:50 Info IPSEC
1803021
ipsec_sa_statistics
done=986 success=0 failed=986
2012-02-08
08:32:50 Warning IPSEC
1800109
ike_quickmode_failed
local_ip=92.50.181.14 remote_ip=77.94.122.54 cookies=e1f15fefbbc9a698796191976374c73f reason="Timeout"
2012-02-08
08:32:50 Warning IPSEC
1803020
ipsec_sa_failed
no_ipsec_sa
statusmsg="Timeout"
2012-02-08
08:32:50 Info IPSEC
1800102
ipsec_event
message=" Remote Proxy ID 192.168.11.0/24 any"
2012-02-08
08:32:50 Info IPSEC
1800102
ipsec_event
message=" Local Proxy ID 192.168.0.0/16 any"
2012-02-08
08:32:50 Info IPSEC
1802703
ike_sa_negotiation_completed
ike_sa_completed
local_peer="92.50.181.14 ID 92.50.181.14" remote_peer="77.94.122.54 ID 77.94.122.54" initiator_spi="e1f15fef bbc9a698" responder_spi="79619197 6374c73f" int_severity=6
2012-02-08
08:32:50 Info IPSEC
1800102
ipsec_event
message="IPsec SA [Responder] negotiation failed:"
2012-02-08
08:32:41 Warning IPSEC
1800106
ike_invalid_payload
local_ip=92.50.181.14 remote_ip=77.94.122.54 cookies=e1f15fefbbc9a698796191976374c73f reason="Delete payload contains invalid protocol id"
Код:
Saturday May 01, 2010 20:18:29 IKED re-TX : QINIT to 92.50.181.14
Saturday May 01, 2010 20:18:30 Send IKE (INFO) : delete [192.168.11.0|77.94.122.54]-->[92.50.181.14|192.168.0.0] phase 2
Saturday May 01, 2010 20:18:30 IKE phase2 (IPSec SA) remove : 192.168.11.0 <-> 192.168.0.0
Saturday May 01, 2010 20:18:30 inbound SPI = 0x8a0ae7ec, outbound SPI = 0x0
Saturday May 01, 2010 20:18:30 Send IKE Q1(QINIT) : 192.168.11.0 --> 192.168.0.0
Saturday May 01, 2010 20:18:35 IKED re-TX : QINIT to 92.50.181.14
Saturday May 01, 2010 20:18:40 IKED re-TX : QINIT to 92.50.181.14
Saturday May 01, 2010 20:18:47 Disassociated: Blocked access attempt from 159.253.132.103:80 to TCP port 11061
Saturday May 01, 2010 20:18:50 IKED re-TX : QINIT to 92.50.181.14
Saturday May 01, 2010 20:18:54 Disassociated: Blocked access attempt from 159.253.132.103:80 to TCP port 11039
Saturday May 01, 2010 20:19:00 IKED re-TX : QINIT to 92.50.181.14
Saturday May 01, 2010 20:19:20 IKED re-TX : QINIT to 92.50.181.14
Saturday May 01, 2010 20:19:21 Send IKE (INFO) : delete [192.168.11.0|77.94.122.54]-->[92.50.181.14|192.168.0.0] phase 2
Saturday May 01, 2010 20:19:21 IKE phase2 (IPSec SA) remove : 192.168.11.0 <-> 192.168.0.0
Saturday May 01, 2010 20:19:21 inbound SPI = 0x8b0acd43, outbound SPI = 0x0
Saturday May 01, 2010 20:19:21 Send IKE Q1(QINIT) : 192.168.11.0 --> 192.168.0.0
Saturday May 01, 2010 20:19:26 IKED re-TX : QINIT to 92.50.181.14
Saturday May 01, 2010 20:19:30 Receive IKE INFO : 92.50.181.14 --> 77.94.122.54
Saturday May 01, 2010 20:19:31 IKED re-TX : QINIT to 92.50.181.14
Что я сделал не так?