<div>Hello all,</div>
<div>I am trying to connect to a RV042 router in a VPN Group, but the connection does not seem to work.</div>
<div> </div>
<div>I am using Shrew Soft VPN Access Manager v. <a href="http://2.1.2.">2.1.2.</a> Configuration is as follows:</div>
<div>Auto Configuration: "disable"</div>
<div>Local Host Address Method is: "Use an existing adapter..."</div>
<div>NAT Traversal: "disable"</div>
<div>IKE Fragmentation: "disable"</div>
<div>Enable Dead Peer Detection: checked</div>
<div>Name resolution: everything unchecked</div>
<div>Authentication Method: "Mutual PSK"</div>
<div>Local Identity: "User FQDN"</div>
<div>Phase 1: "aggressive, group2, aes,256, md5, 28800, 0"</div>
<div>Phase 2: "esp-aes,256, md5, group2, disabled, 3600, 0"</div>
<div>Included lan behind the router paramenter in the "Remote Network Resource" list in the policy tab.</div>
<div> </div>
<div>In the router I have:</div>
<div>Local Group Setup matching lan behind the router parameters</div>
<div>Remote Client Setup matching User FQDN</div>
<div>IPSec setup matching Phase 1 and Phase 2 parameters above, with Perfect Forward Secrecy checked</div>
<div> </div>
<div>I get the following log from the router:</div>
<div>
<table cellspacing="1" width="100%" border="1">
<tbody>
<tr>
<td align="middle">Oct 24 01:07:05 2008</td>
<td> VPN Log</td>
<td> Received Vendor ID payload Type = [Dead Peer Detection] </td>
<tr>
<td align="middle">Oct 24 01:07:05 2008</td>
<td> VPN Log</td>
<td> Ignoring Vendor ID payload [f14b94b7bff1fef0...] </td>
<tr>
<td align="middle">Oct 24 01:07:05 2008</td>
<td> VPN Log</td>
<td> Ignoring Vendor ID payload Type = [Cisco-Unity] </td>
<tr>
<td align="middle">Oct 24 01:07:05 2008</td>
<td> VPN Log</td>
<td> Ignoring Vendor ID payload [166f932d55eb64d8...] </td>
<tr>
<td align="middle">Oct 24 01:07:05 2008</td>
<td> VPN Log</td>
<td> Ignoring Vendor ID payload [8404adf9cda05760...] </td>
<tr>
<td align="middle">Oct 24 01:07:05 2008</td>
<td> VPN Log</td>
<td> Ignoring Vendor ID payload [f4ed19e0c114eb51...] </td>
<tr>
<td align="middle">Oct 24 01:07:05 2008</td>
<td> VPN Log</td>
<td> [Tunnel Negotiation Info] <<< Responder Received Aggressive Mode 1st packet </td>
<tr>
<td align="middle">Oct 24 01:07:05 2008</td>
<td> VPN Log</td>
<td> Aggressive mode peer ID is ID_USER_FQDN: <a href="mailto:'name@name.com.br'">'name@name.com.br'</a> </td>
<tr>
<td align="middle">Oct 24 01:07:05 2008</td>
<td> VPN Log</td>
<td> Responding to Aggressive Mode from xxx.xxx.xxx.236 </td>
<tr>
<td align="middle">Oct 24 01:07:05 2008</td>
<td> VPN Log</td>
<td> [Tunnel Negotiation Info] >>> Responder Send Aggressive Mode 2nd packet </td>
<tr>
<td align="middle">Oct 24 01:07:16 2008</td>
<td> VPN Log</td>
<td> Received informational payload, type INVALID_COOKIE </td></tr></tr></tr></tr></tr></tr></tr></tr></tr></tr></tr></tbody></table></div>
<div> </div>
<div>Logs from Shrew Soft Trace are</div>
<div><font size="1">
<p>08/10/24 01:17:09 ii : ipc client process thread begin ...</p>
<p>08/10/24 01:17:09 <A : peer config add message</p></font><font color="#808080" size="1"><font color="#808080" size="1">
<p>08/10/24 01:17:09 DB : peer ref increment ( ref count = 1, obj count = 0 )</p>
<p>08/10/24 01:17:09 DB : peer added ( obj count = 1 )</p></font></font><font size="1">
<p>08/10/24 01:17:09 ii : local address xxx.xxx.xxx.236:500 selected for peer</p></font><font color="#808080" size="1"><font color="#808080" size="1">
<p>08/10/24 01:17:09 DB : peer ref increment ( ref count = 2, obj count = 1 )</p>
<p>08/10/24 01:17:09 DB : tunnel ref increment ( ref count = 1, obj count = 0 )</p>
<p>08/10/24 01:17:09 DB : tunnel added ( obj count = 1 )</p></font></font><font size="1">
<p>08/10/24 01:17:09 <A : proposal config message</p>
<p>08/10/24 01:17:09 <A : proposal config message</p>
<p>08/10/24 01:17:09 <A : client config message</p>
<p>08/10/24 01:17:09 <A : local id <a href="mailto:'namel@name.com.br'">'namel@name.com.br'</a> message</p>
<p>08/10/24 01:17:09 <A : preshared key message</p>
<p>08/10/24 01:17:09 <A : remote resource message</p>
<p>08/10/24 01:17:09 <A : peer tunnel enable message</p></font><font color="#808080" size="1"><font color="#808080" size="1">
<p>08/10/24 01:17:09 DB : tunnel ref increment ( ref count = 2, obj count = 1 )</p>
<p>08/10/24 01:17:09 DB : new phase1 ( ISAKMP initiator )</p>
<p>08/10/24 01:17:09 DB : exchange type is aggressive</p>
<p>08/10/24 01:17:09 DB : xxx.xxx.xxx.xxx:500 <-> nnn.nnn.nnn.46:500</p>
<p>08/10/24 01:17:09 DB : 7db1e2fd956da89d:0000000000000000</p>
<p>08/10/24 01:17:09 DB : phase1 ref increment ( ref count = 1, obj count = 0 )</p>
<p>08/10/24 01:17:09 DB : phase1 added ( obj count = 1 )</p></font></font><font color="#804000" size="1"><font color="#804000" size="1">
<p>08/10/24 01:17:09 >> : security association payload</p>
<p>08/10/24 01:17:09 >> : - proposal #1 payload </p>
<p>08/10/24 01:17:09 >> : -- transform #1 payload </p>
<p>08/10/24 01:17:09 >> : key exchange payload</p>
<p>08/10/24 01:17:09 >> : nonce payload</p>
<p>08/10/24 01:17:09 >> : identification payload</p>
<p>08/10/24 01:17:09 >> : vendor id payload</p></font></font><font size="1">
<p>08/10/24 01:17:09 ii : local supports DPDv1</p></font><font color="#804000" size="1"><font color="#804000" size="1">
<p>08/10/24 01:17:09 >> : vendor id payload</p></font></font><font size="1">
<p>08/10/24 01:17:09 ii : local is SHREW SOFT compatible</p></font><font color="#804000" size="1"><font color="#804000" size="1">
<p>08/10/24 01:17:09 >> : vendor id payload</p></font></font><font size="1">
<p>08/10/24 01:17:09 ii : local is CISCO UNITY compatible</p></font><font color="#804000" size="1"><font color="#804000" size="1">
<p>08/10/24 01:17:09 >> : vendor id payload</p></font></font><font size="1">
<p>08/10/24 01:17:09 ii : local is NETSCREEN compatible</p></font><font color="#804000" size="1"><font color="#804000" size="1">
<p>08/10/24 01:17:09 >> : vendor id payload</p></font></font><font size="1">
<p>08/10/24 01:17:09 ii : local is SIDEWINDER compatible</p></font><font color="#804000" size="1"><font color="#804000" size="1">
<p>08/10/24 01:17:09 >> : vendor id payload</p></font></font><font size="1">
<p>08/10/24 01:17:09 ii : local is CHECKPOINT compatible</p></font><font color="#000080" size="1"><font color="#000080" size="1">
<p>08/10/24 01:17:09 =< : using ISAKMP SA 7db1e2fd956da89d:0000000000000000</p></font></font><font color="#008000" size="1"><font color="#008000" size="1">
<p>08/10/24 01:17:09 -> : send IKE packet xxx.xxx.xxx.236:500 -> nnn.nnn.nnn.46:500 ( 460 bytes )</p></font></font><font color="#808080" size="1"><font color="#808080" size="1">
<p>08/10/24 01:17:09 DB : phase1 resend event scheduled ( ref count = 2 )</p>
<p>08/10/24 01:17:09 DB : phase1 ref decrement ( ref count = 1, obj count = 1 )</p>
<p>08/10/24 01:17:09 DB : tunnel ref increment ( ref count = 3, obj count = 1 )</p></font></font><font color="#008000" size="1"><font color="#008000" size="1">
<p>08/10/24 01:17:09 <- : recv IKE packet xxx.xxx.xxx.236:500 -> nnn.nnn.nnn.46:500 ( 272 bytes )</p></font></font><font size="1">
<p>08/10/24 01:17:09 ii : parsing ike packet header</p>
<p>08/10/24 01:17:09 ii : attempting to locate phase1 sa for packet</p></font><font color="#808080" size="1"><font color="#808080" size="1">
<p>08/10/24 01:17:09 DB : phase1 found</p>
<p>08/10/24 01:17:09 DB : phase1 ref increment ( ref count = 2, obj count = 1 )</p></font></font><font size="1">
<p>08/10/24 01:17:09 ii : processing phase1 packet ( 272 bytes )</p></font><font color="#000080" size="1"><font color="#000080" size="1">
<p>08/10/24 01:17:09 =< : using ISAKMP SA 7db1e2fd956da89d:937cfb2bafbbeefe</p></font></font><font color="#804000" size="1"><font color="#804000" size="1">
<p>08/10/24 01:17:09 << : security association payload</p>
<p>08/10/24 01:17:09 << : - propsal #1 payload </p>
<p>08/10/24 01:17:09 << : -- transform #1 payload </p></font></font><font size="1">
<p>08/10/24 01:17:09 ii : matched isakmp proposal #1 transform #1</p>
<p>08/10/24 01:17:09 ii : - transform = ike</p>
<p>08/10/24 01:17:09 ii : - cipher type = aes</p>
<p>08/10/24 01:17:09 ii : - key length = 256 bits</p>
<p>08/10/24 01:17:09 ii : - hash type = md5</p>
<p>08/10/24 01:17:09 ii : - dh group = modp-1024</p>
<p>08/10/24 01:17:09 ii : - auth type = psk</p>
<p>08/10/24 01:17:09 ii : - life seconds = 28800</p>
<p>08/10/24 01:17:09 ii : - life kbytes = 0</p></font><font color="#804000" size="1"><font color="#804000" size="1">
<p>08/10/24 01:17:09 << : key exchange payload</p>
<p>08/10/24 01:17:09 << : nonce payload</p>
<p>08/10/24 01:17:09 << : identification payload</p></font></font><font color="#800000" size="1"><font color="#800000" size="1">
<p>08/10/24 01:17:09 !! : phase1 id type mismatch ( received ipv4-host but expected fqdn )</p></font></font><font color="#808080" size="1"><font color="#808080" size="1">
<p>08/10/24 01:17:09 DB : phase1 resend event canceled ( ref count = 1 )</p></font></font><font size="1">
<p>08/10/24 01:17:09 ii : phase1 removal before expire time</p></font><font color="#808080" size="1"><font color="#808080" size="1">
<p>08/10/24 01:17:09 DB : phase1 deleted ( obj count = 0 )</p>
<p>08/10/24 01:17:09 DB : tunnel ref decrement ( ref count = 2, obj count = 1 )</p>
<p>08/10/24 01:17:09 DB : policy not found</p>
<p>08/10/24 01:17:09 DB : policy not found</p>
<p>08/10/24 01:17:09 DB : tunnel stats event canceled ( ref count = 1 )</p>
<p>08/10/24 01:17:09 DB : removing tunnel config references</p>
<p>08/10/24 01:17:09 DB : removing tunnel phase2 references</p>
<p>08/10/24 01:17:09 DB : removing tunnel phase1 references</p>
<p>08/10/24 01:17:09 DB : tunnel deleted ( obj count = 0 )</p>
<p>08/10/24 01:17:10 DB : peer ref decrement ( ref count = 1, obj count = 1 )</p>
<p>08/10/24 01:17:10 DB : removing all peer tunnel refrences</p>
<p>08/10/24 01:17:10 DB : peer deleted ( obj count = 0 )</p></font></font><font size="1">
<p>08/10/24 01:17:10 ii : ipc client process thread exit ...</p></font></div>
<div>and </div>
<div> </div>
<div><font size="1">
<p>08/10/24 01:17:17 ii : inspecting ARP request ...</p></font><font color="#808080" size="1"><font color="#808080" size="1">
<p>08/10/24 01:17:17 DB : policy not found</p></font></font><font size="1">
<p>08/10/24 01:17:17 ii : ignoring ARP request for xxx.xxx.xxx.236, no policy found</p></font></div>
<div> </div>
<div>Please help, I must be forgetting something silly for this to work.</div>
<div> </div>
<div>Thank you very much and regards,</div>
<div> </div>
<div>Jose Romeu</div>
<div> </div>
<div> </div>