search for: state_main_i1

...6.32-27.2.el6_5.i686 ? In our case a connection to Cisco VPN 3000 Series would no longer work. I can see in the log an ASSERTION FAILED error and the connection would remain in Pending phase 2. Mar 7 16:24:40 firewall pluto[7647]: "ciscovpntest" #2: discarding duplicate packet; already STATE_MAIN_I1 Mar 7 16:24:53 firewall pluto[7647]: "ciscovpntest" #2: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n] method set to=106 Mar 7 16:24:53 firewall pluto[7647]: "ciscovpntest" #2: ignoring Vendor ID payload [FRAGMENTATION c0000000] Mar 7 16:24:53 firewall pluto[764...

IF you are not stuck to IPSec, you might want to take a look at OpenVPN (www.openvpn.org). I found OpenVPN easier to install than FreeSWAN (an IPSEC VPN) and have setup an OpenVPN solution between my German office and our mainoffice in a matter of hours. Thom van der Boon E-Mail: Thom.van.der.Boon at vdb.nl ===== Thom.H. van der Boon b.v. Havens 563 Jan Evertsenweg 2-4 NL-3115 JA Schiedam

...gt;> has no tunnel entry to correspond to this tunnel. >> 006 [Thu 16:19:31] "TunnelA" #92: [WRV200 Response:] Please check >> your Remote Secure Gateway setting. >> 007 [Thu 16:19:31] "TunnelA" #92: max number of retransmissions >> (2) reached STATE_MAIN_I1. No response (or no acceptable response) >> to our first IKE message >> 008 [Thu 16:19:31] "TunnelA" #92: starting keying attempt 2 of at >> most 5, but releasing whack >> 009 [Thu 16:19:31] "TunnelA" #93: initiating Main Mode to replace #92 >...