[vpn-help] Shrew VPN Client + Juniper SRX : Autodisconnect

Matthew Grooms mgrooms at shrew.net
Tue Dec 18 12:54:06 CST 2012


Gregory,

Thanks for sending me the log. Very interesting indeed. There appears to 
be a logic bug in the client with respect to the SRX modecfg push 
exchange sequence. This works fine with my SSG but unfortunately not 
with an SRX ( I don't have one of these ). I'll need to examine the 
packet exchange more closely later tonight when I have time.

Thanks,

-Matthew

On 12/18/2012 4:17 AM, Gregory Charot (EVENIUM) wrote:
> Hello all,
>
> Client side debug has been sent privately to Matthew and Alexis.
>
> Thanks !
> Regards,
> Greg
>
> Le 17/12/2012 20:29, Alexis La Goutte a écrit :
>> Hi Gregory (and Jeroen)
>>
>> In your juniper logs, will see some ike keep alive :
>>
>> On Mon, Dec 17, 2012 at 8:20 PM, Gregory Charot (EVENIUM)
>> <gcharot at evenium.com <mailto:gcharot at evenium.com>> wrote:
>>
>>     Dec 17 19:52:50 ike_retransmit_callback: Start, retransmit SA = {
>>     7afff86f ed1dec02 - 8adb783f 94cb567c}, nego = 1
>>     Dec 17 19:52:50 ike_send_packet: Start, retransmit previous packet
>>     SA = { 7afff86f ed1dec02 - 8adb783f 94cb567c}, nego = 1, dst =
>>     x.x.x.x:1370 routing table id = 0
>>
>>
>>
>> It is possible to attach a Shrew logs and debug (with dump ike cap files)
>> http://www.shrew.net/support/wiki/BugReportVpnWindows
>>
>> Regards,
>>
>>
>
>
>
> _______________________________________________
> vpn-help mailing list
> vpn-help at lists.shrew.net
> http://lists.shrew.net/mailman/listinfo/vpn-help
>




More information about the vpn-help mailing list