<div dir="ltr"><div>Hi,<br><br><br>
13/07/07 03:50:49 ii :<b> phase2 rejected, id value mismatch</b><br>
13/07/07 03:50:49 ii : - loc ANY:192.168.11.11:* -> ANY:<a href="http://192.168.0.0/24:*" target="_blank">192.168.0.0/24:*</a><br>
13/07/07 03:50:49 ii : - rmt <UNKNOWN P2ID> -> ANY:<a href="http://192.168.0.0/24:*" target="_blank">192.168.0.0/24:*</a><br> <br></div><div>The settings for phase 2 is not good between the shrew client and your RV082.<br>
<br></div><div>Regards,<br></div><div><div><div class="gmail_extra"><br><br><div class="gmail_quote">On Sun, Jul 7, 2013 at 4:52 AM, Reinhard Szalghary <span dir="ltr"><<a href="mailto:ReinaSowieso@gmx.de" target="_blank">ReinaSowieso@gmx.de</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Hi,<br>
<br>
i tried to build a vpn tunnel with shrew 2.2.2 on a windows 7 x64 pc<br>
to a cisco rv082 router with the latest firmare v4.2.2.08.<br>
but i can't get a sa in phase 2.<br>
i tried different settings in shrew, for example<br>
nat traversal, policy and local host... but without success.<br>
<br>
i had seen this guide:<br>
<a href="https://www.shrew.net/support/Howto_Linksys" target="_blank">https://www.shrew.net/support/<u></u>Howto_Linksys</a><br>
<br>
i want to establish a vpn tunnel for each single user instead of a group.<br>
so i set up a vpn tunnel in the rv082 router with a new subnet<br>
outside of booth existing lan subsets (remote & local) and<br>
use e-mail (USER FQDN) authentification:<br>
remote security gateway typ: dynamic ip + email (ufqdn)<br>
remote security group type: subnet<br>
ip: 192.168.11.11<br>
subset mask: 255.255.255.255<br>
(i tried remote security group type: ip setting also...)<br>
<br>
i configured shrew accordingly.<br>
<br>
result: i can't establish a phase 2 sa.<br>
the router seems not to have a remote network policy.<br>
it seems to me, that i can't configure such a policy in the router<br>
and i can't disable remote network policy in shrew.<br>
<br>
vpn trace from shew:<br>
<br>
13/07/07 03:50:49 == : phase2 hash_r ( input ) ( 132 bytes )<br>
13/07/07 03:50:49 == : phase2 hash_r ( computed ) ( 20 bytes )<br>
13/07/07 03:50:49 == : phase2 hash_r ( received ) ( 20 bytes )<br>
13/07/07 03:50:49 ii : matched ipsec-esp proposal #1 transform #1<br>
13/07/07 03:50:49 ii : - transform = esp-aes<br>
13/07/07 03:50:49 ii : - key length = 128 bits<br>
13/07/07 03:50:49 ii : - encap mode = udp-tunnel ( rfc )<br>
13/07/07 03:50:49 ii : - msg auth = hmac-sha1<br>
13/07/07 03:50:49 ii : - pfs dh group = group2 ( modp-1024 )<br>
13/07/07 03:50:49 ii : - life seconds = <a href="tel:3600" value="+333600" target="_blank">3600</a><br>
13/07/07 03:50:49 ii : - life kbytes = 0<br>
<br>
13/07/07 03:50:49 ii : phase2 rejected, id value mismatch<br>
13/07/07 03:50:49 ii : - loc ANY:192.168.11.11:* -> ANY:<a href="http://192.168.0.0/24:*" target="_blank">192.168.0.0/24:*</a><br>
13/07/07 03:50:49 ii : - rmt <UNKNOWN P2ID> -> ANY:<a href="http://192.168.0.0/24:*" target="_blank">192.168.0.0/24:*</a><br>
<br>
13/07/07 03:50:49 DB : phase2 resend event canceled ( ref count = 1 )<br>
13/07/07 03:50:49 ii : phase2 removal before expire time<br>
13/07/07 03:50:49 DB : phase2 deleted ( obj count = 0 )<br></blockquote><div><br></div><div><br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
any ideas?<br>
<br>
thanks and best regards, Reinhard.<br>
______________________________<u></u>_________________<br>
vpn-help mailing list<br>
<a href="mailto:vpn-help@lists.shrew.net" target="_blank">vpn-help@lists.shrew.net</a><br>
<a href="https://lists.shrew.net/mailman/listinfo/vpn-help" target="_blank">https://lists.shrew.net/<u></u>mailman/listinfo/vpn-help</a><br>
</blockquote></div><br></div></div></div></div>