Всем доброго времени суток!) Немогу настроить VPN через IPSec между DFL и DI
DFL v 2.20.03
Wan IP 10.0.1.18
Wan net 10.0.1.16/29
Lan IP 192.168.1.1
Lan net 255.255.255.0
DI v 1.44
Wan IP 10.0.1.2
Wan net 10.0.1.0/30
Lan IP 192.200.101.193
Lan net 255.255.255.192
Лог Dfl
2009-06-30
22:44:23 Информация IPSEC
1803024


xauth_exchange_done

statusmsg="Authentication failed"
2009-06-30
22:44:23 Информация IPSEC
1803021


ipsec_sa_statistics

done=142 success=0 failed=142
2009-06-30
22:44:23 Предостережение IPSEC
1800109


ike_quickmode_failed

local_ip=10.0.1.18 remote_ip=10.0.1.2 cookies=5f3e63f2ffb9101aebe65275ea6c4d70 reason="Timeout"
2009-06-30
22:44:23 Предостережение IPSEC
1803020


ipsec_sa_failed
no_ipsec_sa
statusmsg="Timeout"
2009-06-30
22:44:23 Информация IPSEC
1800102


ipsec_event

message=" Remote Proxy ID 192.200.101.192/26 any"
2009-06-30
22:44:23 Информация IPSEC
1800102


ipsec_event

message=" Local Proxy ID 192.168.1.0/29 any"
2009-06-30
22:44:23 Информация IPSEC
1802703


ike_sa_negotiation_completed
ike_sa_completed
local_peer="10.0.1.18 ID 10.0.1.18" remote_peer="10.0.1.2 ID 10.0.1.2" initiator_spi="5f3e63f2 ffb9101a" responder_spi="ebe65275 ea6c4d70" int_severity=6
2009-06-30
22:44:23 Информация IPSEC
1800102


ipsec_event

message="IPSec SA [Responder] negotiation failed:"
2009-06-30
22:44:14 Предостережение IPSEC
1800106


ike_invalid_payload

local_ip=10.0.1.18 remote_ip=10.0.1.2 cookies=5f3e63f2ffb9101aebe65275ea6c4d70 reason="Delete payload contains invalid protocol id"
2009-06-30
22:43:32 Информация IPSEC
1803021


ipsec_sa_statistics

done=141 success=0 failed=141
2009-06-30
22:43:32 Предостережение IPSEC
1800109


ike_quickmode_failed

local_ip=10.0.1.18 remote_ip=10.0.1.2 cookies=5f3e63f2ffb9101aebe65275ea6c4d70 reason="No proposal chosen"
2009-06-30
22:43:32 Предостережение IPSEC
1803020


ipsec_sa_failed
no_ipsec_sa
statusmsg="No proposal chosen"
2009-06-30
22:43:32 Информация IPSEC
1800102


ipsec_event

message=" Remote Proxy ID 192.200.101.192/26 any"
2009-06-30
22:43:32 Информация IPSEC
1800102


ipsec_event

message=" Local Proxy ID 192.168.1.0/29 any"
2009-06-30
22:43:32 Информация IPSEC
1802703


ike_sa_negotiation_completed
ike_sa_completed
local_peer="10.0.1.18 ID 10.0.1.18" remote_peer="10.0.1.2 ID 10.0.1.2" initiator_spi="5f3e63f2 ffb9101a" responder_spi="ebe65275 ea6c4d70" int_severity=6
2009-06-30
22:43:32 Информация IPSEC
1800102


ipsec_event

message="IPSec SA [Responder] negotiation failed:"
2009-06-30
22:43:32 Уведомление IPSEC
1802300


rule_selection_failed

info="Peer IP address mismatch" int_severity=6
2009-06-30
22:43:32 Информация IPSEC
1803001


failed_to_select_policy_rule


2009-06-30
22:43:32 Предостережение IPSEC
1800102


ipsec_event

message=" Remote Proxy ID 192.200.101.192/26 any"
2009-06-30
22:43:32 Предостережение IPSEC
1800102


ipsec_event

message=" Local Proxy ID 192.168.1.0/29 any"
2009-06-30
22:43:32 Информация IPSEC
1802703


ike_sa_negotiation_completed
ike_sa_completed
local_peer="10.0.1.18 ID 10.0.1.18" remote_peer="10.0.1.2 ID 10.0.1.2" initiator_spi="5f3e63f2 ffb9101a" responder_spi="ebe65275 ea6c4d70" int_severity=4
2009-06-30
22:43:32 Предостережение IPSEC
1800102


ipsec_event

message="IPSec SA [Responder] negotiation failed:"
2009-06-30
22:43:32 Информация IPSEC
1803024


xauth_exchange_done

statusmsg="Authentication failed"
2009-06-30
22:43:23 Предостережение IPSEC
1800106


ike_invalid_payload

local_ip=10.0.1.18 remote_ip=10.0.1.2 cookies=5f3e63f2ffb9101aebe65275ea6c4d70 reason="Delete payload contains invalid protocol id"
2009-06-30
22:43:11 Уведомление ARP
300003 ARPQueryNoSenderIP wan1
0.0.0.0
10.100.39.89
no_sender_ip
drop
hwsender=00-1e-33-5e-ed-0c hwdest=ff-ff-ff-ff-ff-ff arp=request srcenet=00-1e-33-5e-ed-0c destenet=00-00-00-00-00-00

DI лог
Tuesday June 30, 2009 19:48:13 IKE phase1 (ISAKMP SA) remove : 10.0.1.2 <-> 10.0.1.38
Tuesday June 30, 2009 19:48:13 Send IKE A1(AINIT) : 10.0.1.2 --> 10.0.1.38
Tuesday June 30, 2009 19:48:14 Send IKE (INFO) : delete [192.200.101.192|10.0.1.2]-->[10.0.1.18|192.168.1.0] phase 2
Tuesday June 30, 2009 19:48:14 IKE phase2 (IPSec SA) remove : 192.200.101.192 <-> 192.168.1.0
Tuesday June 30, 2009 19:48:14 inbound SPI = 0x590b0110, outbound SPI = 0x0
Tuesday June 30, 2009 19:48:14 Send IKE Q1(QINIT) : 192.200.101.192 --> 192.168.1.0
Tuesday June 30, 2009 19:48:18 IKED re-TX : AINIT to 10.0.1.38
Tuesday June 30, 2009 19:48:19 IKED re-TX : QINIT to 10.0.1.18
Tuesday June 30, 2009 19:48:23 Receive IKE INFO : 10.0.1.18 --> 10.0.1.2

Прошу помощи умных людй, все внутри одного провайдера..

Зачем пробуете использовать xauth? Настройте по аналолии http://www.dlink.ru/ru/faq/92/520.html

_________________
Сообщения в PM игнорируются, задавайте вопросы на форуме.

2009-07-01
17:49:06 Информация IPSEC
1802708


ike_sa_destroyed
ike_sa_killed
ike_sa=" Initiator SPI ESP=0x3f2e4bd9, AH=0xc9d2ff93, IPComp=0xb5b5e19"
2009-07-01
17:49:06 Предостережение IPSEC
1802022


ike_sa_failed
no_ike_sa
statusmsg="No proposal chosen" local_peer="10.0.1.18 ID No Id" remote_peer="93.188.189.146 ID No Id" initiator_spi="ESP=0x3f2e4bd9, AH=0xc9d2ff93, IPComp=0xb5b5e19b"
2009-07-01
17:49:06 Предостережение IPSEC
1802715


event_on_ike_sa

side=Responder msg="failed" int_severity=6
2009-07-01
17:49:06 Предостережение IPSEC
1800107


ike_invalid_proposal

local_ip=10.0.1.18 remote_ip=93.188.189.146 cookies=3f2e4bd9c9d2ff93b5b5e19b7f6cff3f reason="Could not find acceptable proposal"
2009-07-01
17:49:06 Уведомление IPSEC
1802300


rule_selection_failed

info="Peer IP address mismatch" int_severity=6
2009-07-01
17:49:06 Информация IPSEC
1803001


failed_to_select_policy_rule


2009-07-01
17:49:06 Предостережение IPSEC
1802715


event_on_ike_sa

side=Responder msg="failed" int_severity=6
2009-07-01
17:49:05 Информация IPSEC
1802708


ike_sa_destroyed
ike_sa_killed
ike_sa=" Initiator SPI ESP=0x80d388ea, AH=0x21e5e4bf, IPComp=0x11722ed"
2009-07-01
17:49:05 Предостережение IPSEC
1802022


ike_sa_failed
no_ike_sa
statusmsg="Timeout" local_peer="10.0.1.18 ID No Id" remote_peer="93.188.189.146 ID No Id" initiator_spi="ESP=0x80d388ea, AH=0x21e5e4bf, IPComp=0x11722ed8"
2009-07-01
17:49:05 Предостережение IPSEC
1802715


event_on_ike_sa

side=Responder msg="failed" int_severity=6
2009-07-01
17:49:01 Информация IPSEC
1802708


ike_sa_destroyed
ike_sa_killed
ike_sa=" Initiator SPI ESP=0x3f2e4bd9, AH=0xc9d2ff93, IPComp=0xa48ba97"
2009-07-01
17:49:01 Предостережение IPSEC
1802022


ike_sa_failed
no_ike_sa
statusmsg="No proposal chosen" local_peer="10.0.1.18 ID No Id" remote_peer="93.188.189.146 ID No Id" initiator_spi="ESP=0x3f2e4bd9, AH=0xc9d2ff93, IPComp=0xa48ba971"
2009-07-01
17:49:01 Предостережение IPSEC
1802715


event_on_ike_sa

side=Responder msg="failed" int_severity=6
2009-07-01
17:49:01 Предостережение IPSEC
1800107


ike_invalid_proposal

local_ip=10.0.1.18 remote_ip=93.188.189.146 cookies=3f2e4bd9c9d2ff93a48ba971401b3f9d reason="Could not find acceptable proposal"
2009-07-01
17:49:01 Уведомление IPSEC
1802300


rule_selection_failed

info="Peer IP address mismatch" int_severity=6
2009-07-01
17:49:01 Информация IPSEC
1803001


failed_to_select_policy_rule


2009-07-01
17:49:01 Предостережение IPSEC
1802715


event_on_ike_sa

side=Responder msg="failed" int_severity=6
2009-07-01
17:48:56 Информация IPSEC
1802708


ike_sa_destroyed
ike_sa_killed
ike_sa=" Initiator SPI ESP=0x3f2e4bd9, AH=0xc9d2ff93, IPComp=0x2e862b3"
2009-07-01
17:48:56 Предостережение IPSEC
1802022


ike_sa_failed
no_ike_sa
statusmsg="No proposal chosen" local_peer="10.0.1.18 ID No Id" remote_peer="93.188.189.146 ID No Id" initiator_spi="ESP=0x3f2e4bd9, AH=0xc9d2ff93, IPComp=0x2e862b3a"
2009-07-01
17:48:56 Предостережение IPSEC
1802715


event_on_ike_sa

side=Responder msg="failed" int_severity=6
2009-07-01
17:48:56 Предостережение IPSEC
1800107


ike_invalid_proposal

local_ip=10.0.1.18 remote_ip=93.188.189.146 cookies=3f2e4bd9c9d2ff932e862b3a864ee439 reason="Could not find acceptable proposal"
2009-07-01
17:48:56 Уведомление IPSEC
1802300


rule_selection_failed

info="Peer IP address mismatch" int_severity=6
2009-07-01
17:48:56 Информация IPSEC
1803001


failed_to_select_policy_rule


2009-07-01
17:48:56 Предостережение IPSEC
1802715


event_on_ike_sa

side=Responder msg="failed" int_severity=6
2009-07-01
17:48:55 Информация IPSEC
1803024


xauth_exchange_done

statusmsg="Authentication failed"
2009-07-01
17:48:55 Информация IPSEC
1803021


ipsec_sa_statistics

done=5 success=0 failed=5
2009-07-01
17:48:55 Предостережение IPSEC
1800109


ike_quickmode_failed

local_ip=10.0.1.18 remote_ip=10.0.1.2 cookies=c99161d4f86664f876c8bfcd8401b549 reason="Timeout"
2009-07-01
17:48:55 Предостережение IPSEC
1803020


ipsec_sa_failed
no_ipsec_sa
statusmsg="Timeout"
2009-07-01
17:48:55 Информация IPSEC
1800102


ipsec_event

message=" Remote Proxy ID 192.200.101.192/26 any"
2009-07-01
17:48:55 Информация IPSEC
1800102


ipsec_event

message=" Local Proxy ID 192.168.1.0/29 any"
2009-07-01
17:48:55 Информация IPSEC
1802703


ike_sa_negotiation_completed
ike_sa_completed
local_peer="10.0.1.18:4500 ID 10.0.1.18" remote_peer="10.0.1.2:4500 ID 10.0.1.2" initiator_spi="c99161d4 f86664f8" responder_spi="76c8bfcd 8401b549" int_severity=6
2009-07-01
17:48:55 Информация IPSEC
1800102


ipsec_event

message="IPSec SA [Responder] negotiation failed:"
2009-07-01
17:48:55 Информация IPSEC
1802708


ike_sa_destroyed
ike_sa_killed
ike_sa=" Initiator SPI ESP=0x7b0c4d1e, AH=0x393c70d7, IPComp=0x6880a27"
2009-07-01
17:48:55 Предостережение IPSEC
1802022


ike_sa_failed
no_ike_sa
statusmsg="No proposal chosen" local_peer="10.0.1.18 ID No Id" remote_peer="93.188.189.146 ID No Id" initiator_spi="ESP=0x7b0c4d1e, AH=0x393c70d7, IPComp=0x6880a270"
2009-07-01
17:48:55 Предостережение IPSEC
1802715


event_on_ike_sa

side=Responder msg="failed" int_severity=6
2009-07-01
17:48:55 Предостережение IPSEC
1800107


ike_invalid_proposal

local_ip=10.0.1.18 remote_ip=93.188.189.146 cookies=7b0c4d1e393c70d76880a2706f137893 reason="Could not find acceptable proposal"
2009-07-01
17:48:55 Уведомление IPSEC
1802300


rule_selection_failed

info="Peer IP address mismatch" int_severity=6
2009-07-01
17:48:55 Информация IPSEC
1803001


failed_to_select_policy_rule


2009-07-01
17:48:55 Предостережение IPSEC
1802715


event_on_ike_sa

side=Responder msg="failed" int_severity=6
2009-07-01
17:48:46 Предостережение IPSEC
1800106


ike_invalid_payload

local_ip=10.0.1.18 remote_ip=10.0.1.2 cookies=c99161d4f86664f876c8bfcd8401b549 reason="Delete payload contains invalid protocol id"


При этом Xauth Везде выключен

Беспокоит две вещи
1) 2009-07-01
17:54:06 Уведомление IPSEC
1802300


rule_selection_failed

info="Peer IP address mismatch" int_severity=6
2009-07-01
17:54:06 Информация IPSEC
1803001


failed_to_select_policy_rule

2)2009-07-01
17:54:01 Предостережение IPSEC
1800109


ike_quickmode_failed

local_ip=10.0.1.18 remote_ip=10.0.1.2 cookies=c99161d4f86664f876c8bfcd8401b549 reason="No proposal chosen"
2009-07-01
17:54:01 Предостережение IPSEC
1803020


ipsec_sa_failed
no_ipsec_sa
statusmsg="No proposal chosen"

Роли настроены как в инструкции