<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2963" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>
<DIV><FONT face=Arial size=2>Hi, </FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>I am tyring your VPN client with pfsense (m0n0wall
remake). Its a freebsd based firewall setup. I think I am close to
getting it to work but during or after the PSK negotionation and Phase 1 it
fails with this in the message log.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Sep 27 13:27:33 racoon: INFO: respond new phase 1
negotiation: 65.73.xxx.xxx[500]<=>216.160.xxx.xxx[500] <BR>Sep 27 13:27:33
racoon: INFO: begin Identity Protection mode. <BR>Sep 27 13:27:33 racoon: INFO:
received Vendor ID: CISCO-UNITY <BR>Sep 27 13:27:33 racoon: INFO: received
Vendor ID: draft-ietf-ipsec-nat-t-ike-02 <BR>Sep 27 13:27:33 racoon: INFO:
received Vendor ID: RFC 3947 <BR>Sep 27 13:27:33 racoon: INFO: received broken
Microsoft ID: FRAGMENTATION <BR>Sep 27 13:27:33 racoon: INFO: received Vendor
ID: DPD <BR>Sep 27 13:24:46 racoon: INFO: ISAKMP-SA established
65.73.xxx.xxx[500]-216.160.xxx.xxx[500] spi:b877261ce6a5e9f2:5d77ba7554144e9c
<BR>Sep 27 13:24:46 racoon: ERROR: Invalid exchange type 6 from
216.160.xxx.xxx[500]. <BR>Sep 27 13:24:57 racoon: ERROR: Invalid exchange type 6
from 216.160.xxx.xxx[500].</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>This is a log I managed to get on the Shrewsoft VPN
logs.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>## : IPSEC Daemon, ver 1.1.0</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>## : Copyright 2006 Shrew Soft Inc.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>## : This product linked OpenSSL 0.9.8a 11 Oct
2005</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : rebuilding vnet device list ...</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : device ROOT\VNET\0000 disabled</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : rebuilding vprot interface list
...</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : skipping interface with null
address</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : interface IP=10.14.xxx.xxx, MTU=1500,
MAC=00:01:6c:ea:71:97 active</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : interface IP=223.1.xxx.xxx, MTU=1418,
MAC=00:60:73:ea:71:03 active</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : 2 adapter(s) active</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : client ctrl thread begin ...</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2><C : client peer config message</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2><C : client user credentials
message</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2><C : client preshared key message</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2><C : client tunnel enable message</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : matched phase1 proposal</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : - protocol = isakmp</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : - transform = ike</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : - key length = default</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : - cipher type = 3des</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : - hash type = sha1</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : - dh group = modp-1024</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : - auth type = psk</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : - life seconds = 28000</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : - life kbytes = 0</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : peer supports DPDv1</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : peerid matched ( 65.73.xxx.xxx )</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : phase1 sa established</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : 10.14.xxx.xxx:500 <->
65.73.xxx.xxx:500</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : 4d50ada08dae87a9:1cf3dac12be0fd6</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : sent peer notification,
INITIAL-CONTACT</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : 10.14.xxx.xxx -> 65.73.xxx.xxx</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : isakmp spi =
4d50ada08dae87a9:01cf3dac12be0fd6</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : data size 0</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : determining required modecfg
attributes</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : sending isakmp config request</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : resending ip packet</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : sent peer notification,
DPDV1-R-U-THERE</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : 10.14.34.150 -> 65.73.xxx.xxx</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : isakmp spi =
4d50ada08dae87a9:01cf3dac12be0fd6</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : data size 4</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : received peer notification,
DPDV1-R-U-THERE-ACK</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : 65.73.xxx.xxx -> 10.14.xxx.xxx</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : isakmp spi =
4d50ada08dae87a9:01cf3dac12be0fd6</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : data size 4</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : resending ip packet</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : sent peer notification,
DPDV1-R-U-THERE</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : 10.14.xxx.xxx -> 65.73.xxx.xxx</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : isakmp spi =
4d50ada08dae87a9:01cf3dac12be0fd6</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ii : data size 4</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Then it repeats DPDV1-R-U-THERE sequence serveral
times untill I disconected manually</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Hope this helps. </FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>Chris
<BR> <BR></FONT></DIV></FONT></DIV></BODY></HTML>