[Vpn-help] Connection to Linksys BEFVP41

Matthew Grooms mgrooms at shrew.net
Fri Feb 20 02:32:26 CST 2009


Gabor Boros wrote:
> Hi,
> 
> I want to connect to a Linksys BEFVP41 router. But after many hours of 
> trying the connection not working. Client say tunnel enabled and on 
> Network page I see Security Associations/Failed - 1.
> I see the "unhandled ipv4 id type 'none'( 0 )" message but I don't know 
> what this means. This is my first IPSEC adventure. I hope anybody help 
> me out.
> 
> 09/02/17 11:42:01 DB : phase1 found
> 09/02/17 11:42:01 ii : processing phase2 packet ( 292 bytes )
> 09/02/17 11:42:01 DB : phase2 not found
> 09/02/17 11:42:01 DB : new phase2 ( IPSEC responder )
> 09/02/17 11:42:01 DB : phase2 added ( obj count = 1 )
> 09/02/17 11:42:01 == : new phase2 iv ( 8 bytes )
> 09/02/17 11:42:01 =< : cookies 26be0ad7cc9c7b37:ef5513f4bd5cff9f
> 09/02/17 11:42:01 =< : message 0009079a
> 09/02/17 11:42:01 =< : decrypt iv ( 8 bytes )
> 09/02/17 11:42:01 == : decrypt packet ( 292 bytes )
> 09/02/17 11:42:01 <= : trimmed packet padding ( 4 bytes )
> 09/02/17 11:42:01 <= : stored iv ( 8 bytes )
> 09/02/17 11:42:01 << : hash payload
> 09/02/17 11:42:01 << : security association payload
> 09/02/17 11:42:01 << : - propsal #1 payload
> 09/02/17 11:42:01 << : -- transform #1 payload
> 09/02/17 11:42:01 << : nonce payload
> 09/02/17 11:42:01 << : key exchange payload
> 09/02/17 11:42:01 << : identification payload
> 09/02/17 11:42:01 << : identification payload
> 09/02/17 11:42:01 !! : unhandled ipv4 id type 'none'( 0 )
> 09/02/17 11:42:01 ii : phase2 removal before expire time
> 

Gabor,

The client is processing the packet correctly. I'm guessing the gateway 
sends a 'none' id type when it thinks its communicating with a VPN 
Client. This is strange behavior that I've never seen before.

At some point, does the client try to initiate a phase2 exchange with 
the gateway or is it always the responder? Perhaps when you try to ping 
a device on the remote network? Do you have the complete log output?

Thanks,

-Matthew



More information about the vpn-help mailing list