[vpn-help] [vpn help] Problem with Phase 2 SA lifetime rekeying between ShrewSoft 2.1.7 and Cisco IOS

[Nikolaj Griscenko]

Hi all,

 

I have encountered a problem I can't solve. The connection between shrewsoft
2.1.7 client (Win 7 x64) and Cisco 2811 router (12.4.(3g) IOS) is
established normally and traffic passes ok, but when phase 2 security
association life-time expires - shrewsoft can't renegotiate a new SA with
Cisco and former SA is deleted. I checked the SA parameter both on Cisco and
Shrewsoft and tried different SA values, but no luck. I also attach my trace
files. What could be the problem? Could it be a software bug? Thanks.

 

Nikolaj

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.shrew.net/pipermail/vpn-help/attachments/20110321/b18fe5f9/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: trace-logs.zip
Type: application/x-zip-compressed
Size: 27212 bytes
Desc: not available
URL: <http://lists.shrew.net/pipermail/vpn-help/attachments/20110321/b18fe5f9/attachment.bin>