SVLD писал(а):
какие параметры? всё настроено по описанию от длинк!
архитектура:
10.11.60.0-<di-804hv>10.1.20.1--------10.1.117.1<di-804hv>10.79.1.0
все маски 255.255.255.0
провайдер говорит что ike & esp можно юзать, проблем быть не может
логи после 4х пингов:
инициатор:
Send IKE M1(INIT) : 10.1.20.1 --> 10.1.117.1
Receive IKE M2(RESP) : 10.1.117.1 --> 10.1.20.1
Try to match with ENC:3DES AUTH:PSK HASH:MD5 Group:Group2
Send IKE M3(KEYINIT) : 10.1.20.1 --> 10.1.117.1
Receive IKE M4(KEYRESP) : 10.1.117.1 --> 10.1.20.1
Send IKE M5(IDINIT) : 10.1.20.1 --> 10.1.117.1
receiving a re-Tx MM msg, response the last msg
receiving a re-Tx MM msg, response the last msg
receiving a re-Tx MM msg, response the last msg
receiving a re-Tx MM msg, response the last msg
Send IKE (INFO) : delete 10.1.20.1 -> 10.1.117.1 phase 1
IKE phase1 (ISAKMP SA) remove : 10.1.20.1 <-> 10.1.117.1
Receive IKE INFO : 10.1.117.1 --> 10.1.20.1
Send IKE (INFO) : delete 10.1.20.1 -> 10.1.117.1 phase 1
IKE phase1 (ISAKMP SA) remove : 10.1.20.1 <-> 10.1.117.1
удалённый:
Receive IKE M1(INIT) : 10.1.20.1 --> 10.1.117.1
Try to match with ENC:3DES AUTH:PSK HASH:MD5 Group:Group2
Send IKE M2(RESP) : 10.1.117.1 --> 10.1.20.1
Receive IKE M3(KEYINIT) : 10.1.20.1 --> 10.1.117.1
Send IKE M4(KEYRESP) : 10.1.117.1 --> 10.1.20.1
Receive IKE M5(IDINIT) : 10.1.20.1 --> 10.1.117.1
Receive IKE M5(IDINIT) : 10.1.20.1 --> 10.1.117.1
Receive IKE M5(IDINIT) : 10.1.20.1 --> 10.1.117.1
Receive IKE M5(IDINIT) : 10.1.20.1 --> 10.1.117.1
Receive IKE M5(IDINIT) : 10.1.20.1 --> 10.1.117.1
Receive IKE M5(IDINIT) : 10.1.20.1 --> 10.1.117.1
Receive IKE INFO : 10.1.20.1 --> 10.1.117.1
Send IKE (INFO) : delete 10.1.117.1 -> 10.1.20.1 phase 1
IKE phase1 (ISAKMP SA) remove : 10.1.117.1 <-> 10.1.20.1
Видимо, правила форума вы все же не читали.
Версия FW какая у Вас?