<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>Hi,</div><div>I'm trying to create a tunnel from roadwarrior using shrew vpn client in Ubuntu and a gateway using smoothwall (openswan).</div><div>The vpn is working well from a Mac roadwarrior using VPN Tracker.</div><div><br></div><div>Using Shrew, I see that the tunnel is established but immediately dropped down.</div><div>The gateway receives a Delete SA payload message.</div><div>I can't understand what to modify to avoid this.</div><div><br></div><div>This is what I see in the gateway's log:</div><div><br></div><div>16:44:21<span class="Apple-tab-span" style="white-space:pre"> </span>IPSec MALEX RW<span class="Apple-tab-span" style="white-space:pre"> </span>87.171.119.117 responding to Main Mode from unknown peer 87.171.119.117<br>16:44:21<span class="Apple-tab-span" style="white-space:pre"> </span>IPSec MALEX RW<span class="Apple-tab-span" style="white-space:pre"> </span>87.171.119.117 transition from state STATE_MAIN_R0 to state STATE_MAIN_R1<br>16:44:21<span class="Apple-tab-span" style="white-space:pre"> </span>IPSec MALEX RW<span class="Apple-tab-span" style="white-space:pre"> </span>87.171.119.117 STATE_MAIN_R1: sent MR1, expecting MI2<br>16:44:21<span class="Apple-tab-span" style="white-space:pre"> </span>IPSec MALEX RW<span class="Apple-tab-span" style="white-space:pre"> </span>87.171.119.117 NAT-Traversal: Result using RFC 3947 (NAT-Traversal): peer is NATed<br>16:44:21<span class="Apple-tab-span" style="white-space:pre"> </span>IPSec MALEX RW<span class="Apple-tab-span" style="white-space:pre"> </span>87.171.119.117 transition from state STATE_MAIN_R1 to state STATE_MAIN_R2<br>16:44:21<span class="Apple-tab-span" style="white-space:pre"> </span>IPSec MALEX RW<span class="Apple-tab-span" style="white-space:pre"> </span>87.171.119.117 STATE_MAIN_R2: sent MR2, expecting MI3<br>16:44:21<span class="Apple-tab-span" style="white-space:pre"> </span>IPSec MALEX RW<span class="Apple-tab-span" style="white-space:pre"> </span>87.171.119.117 Main mode peer ID is ID_IPV4_ADDR: '192.168.10.46'<br>16:44:21<span class="Apple-tab-span" style="white-space:pre"> </span>IPSec MALEX RW<span class="Apple-tab-span" style="white-space:pre"> </span>87.171.119.117 crl update for "CN=CA USNT, O=USNT srl, ST=US, OU=R&D, <a href="mailto:E=mrcs@usablenet.com">E=mrcs@usablenet.com</a>, C=IT, L=Tavagnacco" is overdue since Feb 09 15:35:21 UTC 2009<br>16:44:21<span class="Apple-tab-span" style="white-space:pre"> </span>IPSec MALEX RW<span class="Apple-tab-span" style="white-space:pre"> </span>87.171.119.117 I am sending my cert<br>16:44:21<span class="Apple-tab-span" style="white-space:pre"> </span>IPSec MALEX RW<span class="Apple-tab-span" style="white-space:pre"> </span>87.171.119.117 transition from state STATE_MAIN_R2 to state STATE_MAIN_R3<br><b>16:44:21</b><span class="Apple-tab-span" style="white-space:pre"><b> </b></span><b>IPSec MALEX RW</b><span class="Apple-tab-span" style="white-space:pre"><b> </b></span><b>87.171.119.117 STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_RSA_SIG cipher=oakley_3des_cbc_192 prf=oakley_md5 group=modp1536}</b><br>16:44:21<span class="Apple-tab-span" style="white-space:pre"> </span>IPSec MALEX RW<span class="Apple-tab-span" style="white-space:pre"> </span>87.171.119.117 Dead Peer Detection (RFC 3706): not enabled because peer did not advertise it<br><b>16:44:21</b><span class="Apple-tab-span" style="white-space:pre"><b> </b></span><b>IPSec MALEX RW</b><span class="Apple-tab-span" style="white-space:pre"><b> </b></span><b>87.171.119.117 received Delete SA payload: deleting ISAKMP State #1143</b><br>16:44:21<span class="Apple-tab-span" style="white-space:pre"> </span>IPSec MALEX RW<span class="Apple-tab-span" style="white-space:pre"> </span>87.171.119.117: deleting connection "conn176" instance with peer 87.171.119.117 {isakmp=#0/ipsec=#0}</div><br><div apple-content-edited="true">----------<br>Marco Brondani<br>IT Consultant and Mobile Dev Leader<br><a href="mailto:mrcs@usablenet.com">mrcs@usablenet.com</a><br><br>Usablenet Inc (NYC)<br>Your Customers are mobile, is your content?<br>www.usablenet.com<br><br>This message and all attachments are confidential and may be protected by the attorney-client or other <br>privileges. Any unauthorized review, use, disclosure or distribution is prohibited. If you believe this<br>message has been sent to you in error, please notify the sender by replying to this transmission and<br>delete the message without first disclosing it. Thank you.<br></div><br></body></html>