[Vpn-help] NetGear SRNX3205 connection issue

Tom Lahey tel at paymentsense.com
Sun Dec 13 10:34:47 CST 2009


Hello,

Using the version 2.1.5 64-bit client on Windows Vista Pro

Connecting to a Netgear SRNX3205 Firewall firmware 3.0.3-18
I've followed the NetGear setup instructions on the ShrewSoft website. I can
connect to my network just fine, but no traffic is routing.
Below is the VPN Log from the NetGear.  Any suggestions would be
appreciated.
Thanks,

Tom


2009 Dec 13 11:25:45 [SRXN3205] [IKE] Could not find configuration for
83.231.177.161[500]_ - Last output repeated twice - 2009 Dec 13 11:25:48
[SRXN3205] [IKE] Could not find configuration for 95.131.248.48[500]_ 2009
Dec 13 11:25:50 [SRXN3205] [IKE] Remote configuration for identifier "
client.ksfint.com" found_ 2009 Dec 13 11:25:50 [SRXN3205] [IKE] Received
request for new phase 1 negotiation: 74.92.38.137[500]<=>68.162.219.28[500]_
2009 Dec 13 11:25:50 [SRXN3205] [IKE] Beginning Aggressive mode._ 2009 Dec
13 11:25:50 [SRXN3205] [IKE] Received Vendor ID:
draft-ietf-ipsra-isakmp-xauth-06.txt_ 2009 Dec 13 11:25:50 [SRXN3205] [IKE]
Received unknown Vendor ID_ - Last output repeated twice - 2009 Dec 13
11:25:50 [SRXN3205] [IKE] Received Vendor ID:
draft-ietf-ipsec-nat-t-ike-02__ 2009 Dec 13 11:25:50 [SRXN3205] [IKE]
Received unknown Vendor ID_ - Last output repeated 6 times - 2009 Dec 13
11:25:50 [SRXN3205] [IKE] Received Vendor ID: CISCO-UNITY_ 2009 Dec 13
11:25:50 [SRXN3205] [IKE] For 68.162.219.28[500], Selected NAT-T version:
draft-ietf-ipsec-nat-t-ike-02_ 2009 Dec 13 11:25:51 [SRXN3205] [IKE]
Floating ports for NAT-T with peer 68.162.219.28[50333]_ 2009 Dec 13
11:25:51 [SRXN3205] [IKE] NAT-D payload does not match for
74.92.38.137[4500]_ 2009 Dec 13 11:25:51 [SRXN3205] [IKE] NAT-D payload does
not match for 68.162.219.28[50333]_ 2009 Dec 13 11:25:51 [SRXN3205] [IKE]
NAT detected: Local is behind a NAT device. and alsoPeer is behind a NAT
device_ 2009 Dec 13 11:25:51 [SRXN3205] [IKE] Sending Xauth request to
68.162.219.28[50333]_ 2009 Dec 13 11:25:51 [SRXN3205] [IKE] ISAKMP-SA
established for 74.92.38.137[4500]-68.162.219.28[50333] with
spi:c4cbbead250f5436:7637ddb161c00a09_ 2009 Dec 13 11:25:51 [SRXN3205] [IKE]
purging spi=63630808._ 2009 Dec 13 11:25:51 [SRXN3205] [IKE] purging
spi=4311762._ 2009 Dec 13 11:25:51 [SRXN3205] [IKE] Received attribute type
"ISAKMP_CFG_REPLY" from 68.162.219.28[50333]_ 2009 Dec 13 11:25:51
[SRXN3205] [IKE] Login succeeded for user "tlahey"_ 2009 Dec 13 11:25:51
[SRXN3205] [IKE] Received attribute type "ISAKMP_CFG_REQUEST" from
68.162.219.28[50333]_ 2009 Dec 13 11:25:51 [SRXN3205] [IKE] 192.168.42.100
IP address is assigned to remote peer 68.162.219.28[50333]_ 2009 Dec 13
11:25:51 [SRXN3205] [IKE] Ignored attribute 5_ 2009 Dec 13 11:25:51
[SRXN3205] [IKE] Could not find configuration for 83.231.177.161[500]_ 2009
Dec 13 11:25:52 [SRXN3205] [IKE] Could not find configuration for
95.131.248.48[500]_ 2009 Dec 13 11:25:54 [SRXN3205] [IKE] Responding to new
phase 2 negotiation: 74.92.38.137[0]<=>68.162.219.28[0]_ 2009 Dec 13
11:25:54 [SRXN3205] [IKE] Using IPsec SA configuration: 192.168.42.0/24<->
192.168.42.0/24_ 2009 Dec 13 11:25:55 [SRXN3205] [IKE] Adjusting peer's
encmode 61443(61443)->Tunnel(1)_ 2009 Dec 13 11:25:55 [SRXN3205] [IKE]
Responding to new phase 2 negotiation: 74.92.38.137[0]<=>68.162.219.28[0]_
2009 Dec 13 11:25:55 [SRXN3205] [IKE] Using IPsec SA configuration:
192.168.42.0/24<->192.168.42.0/24_ 2009 Dec 13 11:25:55 [SRXN3205] [IKE]
Adjusting peer's encmode 61443(61443)->Tunnel(1)_ 2009 Dec 13 11:25:55
[SRXN3205] [IKE] IPsec-SA established[UDP encap 50333->4500]: ESP/Tunnel
68.162.219.28->74.92.38.137 with spi=187019875(0xb25b263)_ 2009 Dec 13
11:25:55 [SRXN3205] [IKE] IPsec-SA established[UDP encap 4500->50333]:
ESP/Tunnel 74.92.38.137->68.162.219.28 with spi=3599770219(0xd690226b)_ 2009
Dec 13 11:25:55 [SRXN3205] [IKE] IPsec-SA established[UDP encap
50333->4500]: ESP/Tunnel 68.162.219.28->74.92.38.137 with
spi=235377693(0xe07941d)_ 2009 Dec 13 11:25:55 [SRXN3205] [IKE] IPsec-SA
established[UDP encap 4500->50333]: ESP/Tunnel 74.92.38.137->68.162.219.28
with spi=1539971047(0x5bca17e7)_ 2009 Dec 13 11:25:56 [SRXN3205] [IKE] Could
not find configuration for 95.131.248.48[500]_ 2009 Dec 13 11:25:59
[SRXN3205] [IKE] Could not find configuration for 83.231.177.161[500]_ -
Last output repeated twice - 2009 Dec 13 11:26:00 [SRXN3205] [IKE] Could not
find configuration for 95.131.248.48[500]_ 2009 Dec 13 11:26:02 [SRXN3205]
[IKE] Could not find configuration for 83.231.177.161[500]_ 2009 Dec 13
11:26:04 [SRXN3205] [IKE] Could not find configuration for
95.131.248.48[500]_ 2009 Dec 13 11:26:06 [SRXN3205] [IKE] Could not find
configuration for 83.231.177.161[500]_ 2009 Dec 13 11:26:08 [SRXN3205] [IKE]
Could not find configuration for 95.131.248.48[500]_
-- 
------------------------------------------------------------
Tom Lahey
PaymentSense Ltd.
E-mail: tel at PaymentSense.com
Office Line: +44 0207 183 0929 x151
Mobile: +1 603 858 5538
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.shrew.net/pipermail/vpn-help/attachments/20091213/b954bbdc/attachment-0001.html>


More information about the vpn-help mailing list