<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
I will be able to send you some log output from the Draytek but it
doesn't say much. How do I get the debug log file from the client? I
only have 2.2.0 under Windows but I have 2.1.7 on Ubuntu, I could
connect from both (same machine, dual boot) and send you (but not
the list) the logs?<br>
<br>
Dominic<br>
<br>
<div class="moz-cite-prefix">On 12/12/2012 23:46, Matthew Grooms
wrote:<br>
</div>
<blockquote cite="mid:50C9176C.7060503@shrew.net" type="cite">
<pre wrap="">Quite likely it's because we added support for SHA2 hash algorithms in
the 2.2 branch and it's causing either ...
1) the packet to become fragmented since the size is larger due to more
proposal combinations being submitted during phase2 negotiation.
2) the gateway to choke on the proposal because it doesn't like the new
hash algorithms being included ( although they should just be skipped in
the case that they aren't recognized ).
Do you have a debug log file, or better yet, an ike packet trace from
the 2.1.7 and the 2.2.0 negotiation? It would help to see both of them
to determine if something is amiss. It would also be helpful to see the
log output from your VPN gateway as it should hold some clue as to why
the proposal is being rejected when the client is set to auto.
-Matthew
On 12/11/2012 11:38 PM, Dominic Raferd wrote:
</pre>
<blockquote type="cite">
<pre wrap="">I am testing Shrewsoft Windows Client 2.2.0-rc1 for Windows (connecting
to Draytek 2930).
I have found that despite what the manual says (for 2.1.0) it is
necessary explicitly to set the Phase 2 Transform Algorithm to
'esp-3des' and not to leave it at 'auto' in order to get a connection.
Is this a deliberate change in 2.2.0 or a bug?
Regards
Dominic
--
*Timedicer <a class="moz-txt-link-rfc2396E" href="http://www.timedicer.co.uk"><http://www.timedicer.co.uk></a> - File Recovery from Whenever
*
_______________________________________________
vpn-help mailing list
<a class="moz-txt-link-abbreviated" href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a>
<a class="moz-txt-link-freetext" href="http://lists.shrew.net/mailman/listinfo/vpn-help">http://lists.shrew.net/mailman/listinfo/vpn-help</a>
</pre>
</blockquote>
<pre wrap="">
</pre>
</blockquote>
<br>
<div class="moz-signature">-- <br>
<a href="http://www.timedicer.co.uk"><b>TimeDicer</b></a>: Free
File Recovery from Whenever</div>
</body>
</html>