jmvpnc at loplof
Jun 24, 2008, 10:39 AM
Post #7 of 7
(222 views)
Permalink
|
|
Re: vpnc drops connection after 10 seconds
[In reply to]
|
|
Forgot the attachment...
:
On Tue, Jun 24, 2008 at 07:13:04PM +0200, Joerg Mayer wrote:
> On Tue, Jun 24, 2008 at 03:03:00PM +0300, Volodymyr Buell wrote:
> > lifetime status: 1214307143 of 28800 seconds used, 1|1 of 0 kbytes used
> > received something on ike fd..
> > got late ike paket: 68 bytes
> > BEGIN_PARSE
> [...]
> > PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D)
> > next_type: 00 (ISAKMP_PAYLOAD_NONE)
> > length: 0010
> > d.doi: 00000001 (ISAKMP_DOI_IPSEC)
> > d.protocol: 03 (ISAKMP_IPSEC_PROTO_IPSEC_ESP)
> > d.spi_length: 04
> > d.num_spi: 0001
> > d.spi: 6b2c8bb5
> > DONE PARSING PAYLOAD type: 0c (ISAKMP_PAYLOAD_D)
>
> OK, looks like the same problem that was reported before and where I sent a
> patch for testing but haven't received an answer yet.
> The problem seems to be that the other side expects us to do active rekeying
> (i.e. they send a delete payload for the ipsec spi and expect *our* side to
> initiate the rekeying). So far we only support passive rekeying (we wait for
> the other side to initiate ipsec rekeying).
>
> Please update the sources to current svn head, apply the attached patch on
> top of that, compile, test and report back :-)
--
Joerg Mayer <jmayer[at]loplof.de>
We are stuck with technology when what we really want is just stuff that
works. Some say that should read Microsoft instead of technology.
|
vpnc-active-rekey.diff
