NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

assistance's avatar
assistance
Follower
Nov 21, 2016

FVS336GV2 - IPSec VPN issues - Openswan / Orange

Hi,

 

I try to configure a site-to-site VPN with one FVS336GV2 and OpenSwan.

 

The log are :

Mon Nov 21 09:53:39 2016 (GMT +0100): [FVS336Gv2] [IKE] ERROR:  Unknown notify message from {REMOTE_IP}[500].No phase2 handle found.
Mon Nov 21 09:53:37 2016 (GMT +0100): [FVS336Gv2] [IKE] ERROR:  Failed to get IPsec SA configuration for: 192.168.0.64/27<->10.48.140.0/27 from {REMOTE_IP}/32
Mon Nov 21 09:53:37 2016 (GMT +0100): [FVS336Gv2] [IKE] INFO:  Responding to new phase 2 negotiation: {LOCAL_WAN_IP}[0]<=>{REMOTE_IP}[0]
Mon Nov 21 09:53:33 2016 (GMT +0100): [FVS336Gv2] [IKE] ERROR:  ignore information due to hash length mismatch
Mon Nov 21 09:53:29 2016 (GMT +0100): [FVS336Gv2] [IKE] ERROR:  Unknown notify message from {REMOTE_IP}[500].No phase2 handle found.
Mon Nov 21 09:53:27 2016 (GMT +0100): [FVS336Gv2] [IKE] ERROR:  Failed to get IPsec SA configuration for: 192.168.0.64/27<->10.48.140.0/27 from {REMOTE_IP}/32
Mon Nov 21 09:53:27 2016 (GMT +0100): [FVS336Gv2] [IKE] INFO:  Responding to new phase 2 negotiation: {LOCAL_WAN_IP}[0]<=>{REMOTE_IP}[0]
Mon Nov 21 09:53:24 2016 (GMT +0100): [FVS336Gv2] [IKE] ERROR:  ignore information due to hash length mismatch
Mon Nov 21 09:53:19 2016 (GMT +0100): [FVS336Gv2] [IKE] ERROR:  Unknown notify message from {REMOTE_IP}[500].No phase2 handle found.
Mon Nov 21 09:53:13 2016 (GMT +0100): [FVS336Gv2] [IKE] ERROR:  ignore information due to hash length mismatch
Mon Nov 21 09:53:13 2016 (GMT +0100): [FVS336Gv2] [IKE] INFO:  Initiating new phase 2 negotiation: {LOCAL_WAN_IP}[500]<=>{REMOTE_IP}[0]
Mon Nov 21 09:53:13 2016 (GMT +0100): [FVS336Gv2] [IKE] INFO:  Configuration found for {REMOTE_IP}.
Mon Nov 21 09:53:13 2016 (GMT +0100): [FVS336Gv2] [IKE] INFO:  Configuration found for {REMOTE_IP}.
Mon Nov 21 09:53:13 2016 (GMT +0100): [FVS336Gv2] [IKE] INFO:  FOUND
Mon Nov 21 09:53:13 2016 (GMT +0100): [FVS336Gv2] [IKE] INFO:  accept a request to establish IKE-SA: {REMOTE_IP}

I can manage the configuration on the FVS336GV2 but not on the openswan.

 

The configuration for FVS336Gv2 :IKE_POLICY.PNGVPN.PNG

 

Thank you for your help

 

 

2 Replies

NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology! 

Join Us!

ProSupport for Business

Comprehensive support plans for maximum network uptime and business peace of mind.

 

Learn More