<html>
<body>
Hello everybody,<br><br>
I currently use the latest stable release of shrew and I want to
implement authentification.<br><br>
When I launch an authentification I obtain these IKE logs :<br><br>
<font face="Courier, Courier" size=2>09/12/23 08:54:58 ## : IKE Daemon,
ver 2.1.5<br>
09/12/23 08:54:58 ## : Copyright 2009 Shrew Soft Inc.<br>
09/12/23 08:54:58 ## : This product linked OpenSSL 0.9.8h 28 May
2008<br>
09/12/23 08:54:58 ii : opened 'C:\Program Files\ShrewSoft\VPN
Client\debug\iked.log'<br>
09/12/23 08:54:58 ii : rebuilding vnet device list ...<br>
09/12/23 08:54:58 ii : device ROOT\VNET\0000 disabled<br>
09/12/23 08:54:58 ii : network process thread begin ...<br>
09/12/23 08:54:58 ii : pfkey process thread begin ...<br>
09/12/23 08:54:58 ii : ipc server process thread begin ...<br>
09/12/23 08:55:11 ii : ipc client process thread begin ...<br>
09/12/23 08:55:11 <A : peer config add message<br>
</font><font face="Courier, Courier" size=2 color="#808080">09/12/23
08:55:11 DB : peer ref increment ( ref count = 1, obj count = 0 )<br>
09/12/23 08:55:11 DB : peer added ( obj count = 1 )<br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:11 ii : local
address 192.168.1.105 selected for peer<br>
</font><font face="Courier, Courier" size=2 color="#808080">09/12/23
08:55:11 DB : peer ref increment ( ref count = 2, obj count = 1 )<br>
09/12/23 08:55:11 DB : tunnel ref increment ( ref count = 1, obj count =
0 )<br>
09/12/23 08:55:11 DB : tunnel added ( obj count = 1 )<br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:11 <A :
proposal config message<br>
09/12/23 08:55:11 <A : proposal config message<br>
09/12/23 08:55:11 <A : client config message<br>
09/12/23 08:55:11 <A : local id 'localid' message<br>
09/12/23 08:55:11 <A : remote id 'remoteid' message<br>
09/12/23 08:55:11 <A : preshared key message<br>
09/12/23 08:55:11 <A : peer tunnel enable message<br>
</font><font face="Courier, Courier" size=2 color="#808080">09/12/23
08:55:11 DB : tunnel ref increment ( ref count = 2, obj count = 1 )<br>
09/12/23 08:55:11 DB : new phase1 ( ISAKMP initiator )<br>
09/12/23 08:55:11 DB : exchange type is aggressive<br>
09/12/23 08:55:11 DB : 192.168.1.105:500 <-> 192.168.1.128:500<br>
09/12/23 08:55:11 DB : cc571b23516dfb9d:0000000000000000<br>
09/12/23 08:55:11 DB : phase1 ref increment ( ref count = 1, obj count =
0 )<br>
09/12/23 08:55:11 DB : phase1 added ( obj count = 1 )<br>
</font><font face="Courier, Courier" size=2 color="#804000">09/12/23
08:55:11 >> : security association payload<br>
09/12/23 08:55:11 >> : - proposal #1 payload <br>
09/12/23 08:55:11 >> : -- transform #1 payload <br>
09/12/23 08:55:11 >> : key exchange payload<br>
09/12/23 08:55:11 >> : nonce payload<br>
09/12/23 08:55:11 >> : identification payload<br>
09/12/23 08:55:11 >> : vendor id payload<br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:11 ii : local
supports FRAGMENTATION<br>
</font><font face="Courier, Courier" size=2 color="#804000">09/12/23
08:55:11 >> : vendor id payload<br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:11 ii : local
supports DPDv1<br>
</font><font face="Courier, Courier" size=2 color="#804000">09/12/23
08:55:11 >> : vendor id payload<br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:11 ii : local
is SHREW SOFT compatible<br>
</font><font face="Courier, Courier" size=2 color="#804000">09/12/23
08:55:11 >> : vendor id payload<br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:11 ii : local
is NETSCREEN compatible<br>
</font><font face="Courier, Courier" size=2 color="#804000">09/12/23
08:55:11 >> : vendor id payload<br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:11 ii : local
is SIDEWINDER compatible<br>
</font><font face="Courier, Courier" size=2 color="#804000">09/12/23
08:55:11 >> : vendor id payload<br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:11 ii : local
is CISCO UNITY compatible<br>
</font><font face="Courier, Courier" size=2 color="#000080">09/12/23
08:55:11 >= : cookies cc571b23516dfb9d:0000000000000000<br>
09/12/23 08:55:11 >= : message 00000000<br>
</font><font face="Courier, Courier" size=2 color="#008000">09/12/23
08:55:11 -> : send IKE packet 192.168.1.105:500 ->
192.168.1.128:500 ( 412 bytes )<br>
</font><font face="Courier, Courier" size=2 color="#808080">09/12/23
08:55:11 DB : phase1 resend event scheduled ( ref count = 2 )<br>
09/12/23 08:55:11 DB : phase1 ref decrement ( ref count = 1, obj count =
1 )<br>
09/12/23 08:55:11 DB : tunnel ref increment ( ref count = 3, obj count =
1 )<br>
</font><font face="Courier, Courier" size=2 color="#008000">09/12/23
08:55:11 <- : recv IKE packet 192.168.1.128:500 ->
192.168.1.105:500 ( 276 bytes )<br>
</font><font face="Courier, Courier" size=2 color="#808080">09/12/23
08:55:11 DB : phase1 found<br>
09/12/23 08:55:11 DB : phase1 ref increment ( ref count = 2, obj count =
1 )<br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:11 ii :
processing phase1 packet ( 276 bytes )<br>
</font><font face="Courier, Courier" size=2 color="#000080">09/12/23
08:55:11 =< : cookies cc571b23516dfb9d:74d8f47e80c8c24c<br>
09/12/23 08:55:11 =< : message 00000000<br>
</font><font face="Courier, Courier" size=2 color="#804000">09/12/23
08:55:11 << : security association payload<br>
09/12/23 08:55:11 << : - propsal #1 payload <br>
09/12/23 08:55:11 << : -- transform #1 payload <br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:11 ii :
matched isakmp proposal #1 transform #1<br>
09/12/23 08:55:11 ii : - transform = ike<br>
09/12/23 08:55:11 ii : - cipher type = 3des<br>
09/12/23 08:55:11 ii : - key length = default<br>
09/12/23 08:55:11 ii : - hash type = sha1<br>
09/12/23 08:55:11 ii : - dh group =
modp-1024<br>
09/12/23 08:55:11 ii : - auth type = psk<br>
09/12/23 08:55:11 ii : - life seconds = 86400<br>
09/12/23 08:55:11 ii : - life kbytes = 0<br>
</font><font face="Courier, Courier" size=2 color="#804000">09/12/23
08:55:11 << : key exchange payload<br>
09/12/23 08:55:11 << : nonce payload<br>
09/12/23 08:55:11 << : identification payload<br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:11 ii : phase1
id match <br>
09/12/23 08:55:11 ii : received = fqdn localid<br>
</font><font face="Courier, Courier" size=2 color="#804000">09/12/23
08:55:11 << : hash payload<br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:11 ii : nat-t
is disabled locally<br>
</font><font face="Courier, Courier" size=2 color="#000080">09/12/23
08:55:11 == : DH shared secret ( 128 bytes )<br>
09/12/23 08:55:11 == : SETKEYID ( 20 bytes )<br>
09/12/23 08:55:11 == : SETKEYID_d ( 20 bytes )<br>
09/12/23 08:55:11 == : SETKEYID_a ( 20 bytes )<br>
09/12/23 08:55:11 == : SETKEYID_e ( 20 bytes )<br>
09/12/23 08:55:11 == : cipher key ( 40 bytes )<br>
09/12/23 08:55:11 == : cipher iv ( 8 bytes )<br>
09/12/23 08:55:11 == : phase1 hash_i ( computed ) ( 20 bytes )<br>
</font><font face="Courier, Courier" size=2 color="#804000">09/12/23
08:55:11 >> : hash payload<br>
</font><font face="Courier, Courier" size=2 color="#000080">09/12/23
08:55:11 >= : cookies cc571b23516dfb9d:74d8f47e80c8c24c<br>
09/12/23 08:55:11 >= : message 00000000<br>
09/12/23 08:55:11 >= : encrypt iv ( 8 bytes )<br>
09/12/23 08:55:11 == : encrypt packet ( 52 bytes )<br>
09/12/23 08:55:11 == : stored iv ( 8 bytes )<br>
</font><font face="Courier, Courier" size=2 color="#808080">09/12/23
08:55:11 DB : phase1 resend event canceled ( ref count = 1 )<br>
</font><font face="Courier, Courier" size=2 color="#008000">09/12/23
08:55:11 -> : send IKE packet 192.168.1.105:500 ->
192.168.1.128:500 ( 80 bytes )<br>
</font><font face="Courier, Courier" size=2 color="#000080">09/12/23
08:55:11 == : phase1 hash_r ( computed ) ( 20 bytes )<br>
09/12/23 08:55:11 == : phase1 hash_r ( received ) ( 20 bytes )<br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:11 ii : phase1
sa established<br>
09/12/23 08:55:11 ii : 192.168.1.128:500 <-> 192.168.1.105:500<br>
09/12/23 08:55:11 ii : cc571b23516dfb9d:74d8f47e80c8c24c<br>
09/12/23 08:55:11 ii : sending peer INITIAL-CONTACT notification<br>
09/12/23 08:55:11 ii : - 192.168.1.105:500 -> 192.168.1.128:500<br>
09/12/23 08:55:11 ii : - isakmp spi =
cc571b23516dfb9d:74d8f47e80c8c24c<br>
09/12/23 08:55:11 ii : - data size 0<br>
</font><font face="Courier, Courier" size=2 color="#804000">09/12/23
08:55:11 >> : hash payload<br>
09/12/23 08:55:11 >> : notification payload<br>
</font><font face="Courier, Courier" size=2 color="#000080">09/12/23
08:55:11 == : new informational hash ( 20 bytes )<br>
09/12/23 08:55:11 == : new informational iv ( 8 bytes )<br>
09/12/23 08:55:11 >= : cookies cc571b23516dfb9d:74d8f47e80c8c24c<br>
09/12/23 08:55:11 >= : message 574f873d<br>
09/12/23 08:55:11 >= : encrypt iv ( 8 bytes )<br>
09/12/23 08:55:11 == : encrypt packet ( 80 bytes )<br>
09/12/23 08:55:11 == : stored iv ( 8 bytes )<br>
</font><font face="Courier, Courier" size=2 color="#008000">09/12/23
08:55:11 -> : send IKE packet 192.168.1.105:500 ->
192.168.1.128:500 ( 112 bytes )<br>
</font><font face="Courier, Courier" size=2 color="#808080">09/12/23
08:55:11 DB : tunnel ref increment ( ref count = 4, obj count = 1 )<br>
09/12/23 08:55:11 DB : config ref increment ( ref count = 1, obj count =
0 )<br>
09/12/23 08:55:11 DB : config added ( obj count = 1 )<br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:11 ii :
building config attribute list<br>
09/12/23 08:55:11 ii : - IP4 Address<br>
09/12/23 08:55:11 ii : - Address Expiry<br>
09/12/23 08:55:11 ii : - IP4 Netamask<br>
09/12/23 08:55:11 ii : - IP4 DNS Server<br>
09/12/23 08:55:11 ii : - IP4 Subnet<br>
</font><font face="Courier, Courier" size=2 color="#000080">09/12/23
08:55:11 == : new config iv ( 8 bytes )<br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:11 ii :
sending config pull request<br>
</font><font face="Courier, Courier" size=2 color="#804000">09/12/23
08:55:11 >> : hash payload<br>
09/12/23 08:55:11 >> : attribute payload<br>
</font><font face="Courier, Courier" size=2 color="#000080">09/12/23
08:55:11 == : new configure hash ( 20 bytes )<br>
09/12/23 08:55:11 >= : cookies cc571b23516dfb9d:74d8f47e80c8c24c<br>
09/12/23 08:55:11 >= : message 671df311<br>
09/12/23 08:55:11 >= : encrypt iv ( 8 bytes )<br>
09/12/23 08:55:11 == : encrypt packet ( 80 bytes )<br>
09/12/23 08:55:11 == : stored iv ( 8 bytes )<br>
</font><font face="Courier, Courier" size=2 color="#008000">09/12/23
08:55:11 -> : send IKE packet 192.168.1.105:500 ->
192.168.1.128:500 ( 112 bytes )<br>
</font><font face="Courier, Courier" size=2 color="#808080">09/12/23
08:55:11 DB : config resend event scheduled ( ref count = 2 )<br>
09/12/23 08:55:11 DB : config ref decrement ( ref count = 1, obj count =
1 )<br>
09/12/23 08:55:11 DB : phase1 ref increment ( ref count = 2, obj count =
1 )<br>
09/12/23 08:55:11 DB : phase1 ref increment ( ref count = 3, obj count =
1 )<br>
09/12/23 08:55:11 DB : phase1 ref increment ( ref count = 4, obj count =
1 )<br>
09/12/23 08:55:11 DB : phase2 not found<br>
09/12/23 08:55:11 DB : phase1 ref decrement ( ref count = 3, obj count =
1 )<br>
</font><font face="Courier, Courier" size=2 color="#008000">09/12/23
08:55:16 -> : resend 1 config packet(s) 192.168.1.105:500 ->
192.168.1.128:500<br>
09/12/23 08:55:21 -> : resend 1 config packet(s) 192.168.1.105:500
-> 192.168.1.128:500<br>
09/12/23 08:55:26 -> : resend 1 config packet(s) 192.168.1.105:500
-> 192.168.1.128:500<br>
</font><font face="Courier, Courier" size=2>09/12/23 08:55:31 ii : resend
limit exceeded for config exchange<br>
</font><font face="Courier, Courier" size=2 color="#808080">09/12/23
08:55:31 DB : config deleted ( obj count = 0 )<br>
09/12/23 08:55:31 DB : tunnel ref decrement ( ref count = 3, obj count =
1 )<br><br>
---------------<br><br>
</font>I think the main problem is here : 09/12/23 08:55:11 DB : phase2
not found<br><br>
Then the connection is pending. The only way is the cancel
button.<br><br>
Thanks for your help.<br><br>
Bye.<br><br>
</body>
</html>