<div dir="ltr"><div><div><div>Hi Freddy,<br><br></div>I think the problem come the IKE Fragmentation.<br></div>Do you try to no use Auto Mode for Phase 2 parameters ? <br></div>Regards,<br><div><div><div><div><div><div class="gmail_extra">
<br><br><div class="gmail_quote">On Thu, Oct 31, 2013 at 6:48 AM, Freddy Turriaf <span dir="ltr"><<a href="mailto:fturriaf@gmail.com" target="_blank">fturriaf@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">Hi there (shorter version)<br><div class="gmail_quote"><div dir="ltr"><div>I am facing a weird problem: my VPN fail when using my home cable connection but succeed when tethering from my mobile phone.</div>
<div>
Here the logs:</div><div><br></div><div>Failing connection (Cable):</div>
<div><br></div><div><p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-family:Courier;font-size:7pt">...</span></p><p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="color:rgb(32,128,32);font-family:Courier;font-size:7pt">13/10/30 22:47:42 -> : resend 1
phase2 packet(s) [0/2] </span><a href="http://192.168.0.2:4500" style="font-family:Courier;font-size:7pt" target="_blank">192.168.0.2:4500</a><span style="color:rgb(32,128,32);font-family:Courier;font-size:7pt"> -> </span><a href="http://135.244.31.254:4500" style="font-family:Courier;font-size:7pt" target="_blank">135.244.31.254:4500</a><br>
</p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 22:47:47 -> : resend 1
phase2 packet(s) [1/2] <a href="http://192.168.0.2:4500" target="_blank">192.168.0.2:4500</a> -> <a href="http://135.244.31.254:4500" target="_blank">135.244.31.254:4500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 22:47:52 -> : resend 1
phase2 packet(s) [2/2] <a href="http://192.168.0.2:4500" target="_blank">192.168.0.2:4500</a> -> <a href="http://135.244.31.254:4500" target="_blank">135.244.31.254:4500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)" lang="EN-US">13/10/30 22:47:53 >= : cookies
145a9efd828be9f6:9dfba21e6da431fa</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)" lang="EN-US">13/10/30 22:47:53 >= : message
e32a121d</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;background-color:yellow;font-family:Courier" lang="EN-US">13/10/30
22:47:57 ii : resend limit exceeded for phase2 exchange</span><span style="font-size:7pt;font-family:Courier" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:47:57 ii : phase2 removal
before expire time</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 22:47:58 -> : resend 1
phase2 packet(s) [0/2] <a href="http://192.168.0.2:4500" target="_blank">192.168.0.2:4500</a> -> <a href="http://135.244.31.254:4500" target="_blank">135.244.31.254:4500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 22:48:03 -> : resend 1
phase2 packet(s) [1/2] <a href="http://192.168.0.2:4500" target="_blank">192.168.0.2:4500</a> -> <a href="http://135.244.31.254:4500" target="_blank">135.244.31.254:4500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 22:48:08 -> : resend 1
phase2 packet(s) [2/2] <a href="http://192.168.0.2:4500" target="_blank">192.168.0.2:4500</a> -> <a href="http://135.244.31.254:4500" target="_blank">135.244.31.254:4500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)" lang="EN-US">13/10/30 22:48:09 >= : cookies
145a9efd828be9f6:9dfba21e6da431fa</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)" lang="EN-US">13/10/30 22:48:09 >= : message
c5ce4a49</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;background-color:yellow;font-family:Courier" lang="EN-US">13/10/30
22:48:13 ii : resend limit exceeded for phase2 exchange</span><span style="font-size:7pt;font-family:Courier" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:48:13 ii : phase2 removal
before expire time</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 22:48:14 -> : resend 1
phase2 packet(s) [0/2] <a href="http://192.168.0.2:4500" target="_blank">192.168.0.2:4500</a> -> <a href="http://135.244.31.254:4500" target="_blank">135.244.31.254:4500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 22:48:19 -> : resend 1
phase2 packet(s) [1/2] <a href="http://192.168.0.2:4500" target="_blank">192.168.0.2:4500</a> -> <a href="http://135.244.31.254:4500" target="_blank">135.244.31.254:4500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 22:48:24 -> : resend 1
phase2 packet(s) [2/2] <a href="http://192.168.0.2:4500" target="_blank">192.168.0.2:4500</a> -> <a href="http://135.244.31.254:4500" target="_blank">135.244.31.254:4500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)" lang="EN-US">13/10/30 22:48:25 >= : cookies
145a9efd828be9f6:9dfba21e6da431fa</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)" lang="EN-US">13/10/30 22:48:25 >= : message
86f99b76</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;background-color:yellow;font-family:Courier" lang="EN-US">13/10/30
22:48:29 ii : resend limit exceeded for phase2 exchange</span><span style="font-size:7pt;font-family:Courier" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:48:29 ii : phase2 removal
before expire time</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 22:48:30 -> : resend 1
phase2 packet(s) [0/2] <a href="http://192.168.0.2:4500" target="_blank">192.168.0.2:4500</a> -> <a href="http://135.244.31.254:4500" target="_blank">135.244.31.254:4500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 22:48:35 -> : resend 1
phase2 packet(s) [1/2] <a href="http://192.168.0.2:4500" target="_blank">192.168.0.2:4500</a> -> <a href="http://135.244.31.254:4500" target="_blank">135.244.31.254:4500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 22:48:40 -> : resend 1
phase2 packet(s) [2/2] <a href="http://192.168.0.2:4500" target="_blank">192.168.0.2:4500</a> -> <a href="http://135.244.31.254:4500" target="_blank">135.244.31.254:4500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)" lang="EN-US">13/10/30 22:48:41 >= : cookies
145a9efd828be9f6:9dfba21e6da431fa</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)" lang="EN-US">13/10/30 22:48:41 >= : message
09019ef0</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;background-color:yellow;font-family:Courier" lang="EN-US">13/10/30
22:48:45 ii : resend limit exceeded for phase2 exchange</span><span style="font-size:7pt;font-family:Courier" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><br></p></div><div>Now using my 4G tethering (successful)</div><div><br></div><div><p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-family:Courier;font-size:7pt">...</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="color:rgb(0,92,92);font-family:Courier;font-size:7pt">13/10/30 22:53:12 >= : cookies
594fc69bad4dd2e4:</span><span style="color:rgb(0,92,92);font-family:Courier;font-size:7pt">98c94bc25b464bc5</span><br></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)" lang="EN-US">13/10/30 22:53:12 >= : message
d4143a8a</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 22:53:17 -> : resend 1
phase2 packet(s) [0/2] <a href="http://172.20.10.2:4500" target="_blank">172.20.10.2:4500</a> -> <a href="http://135.244.31.254:4500" target="_blank">135.244.31.254:4500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 22:53:22 -> : resend 1
phase2 packet(s) [1/2] <a href="http://172.20.10.2:4500" target="_blank">172.20.10.2:4500</a> -> <a href="http://135.244.31.254:4500" target="_blank">135.244.31.254:4500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;background-color:yellow;font-family:Courier" lang="EN-US">13/10/30
22:53:23 ii : processing phase2 packet ( 180 bytes )</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92);background-color:yellow" lang="EN-US">13/10/30
22:53:23 =< : cookies 594fc69bad4dd2e4:98c94bc25b464bc5</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92);background-color:yellow" lang="EN-US">13/10/30
22:53:23 =< : message d4143a8a</span><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : matched ipsec-esp
proposal #1 transform #32</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : - transform = esp-3des</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : - key length = default</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : - encap mode = udp-tunnel ( rfc )</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : - msg auth = hmac-sha1</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : - pfs dh group =
none</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : - life seconds =
3600</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : - life kbytes = 0</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : received peer
RESPONDER-LIFETIME notification</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : -
<a href="http://135.244.31.254:4500" target="_blank">135.244.31.254:4500</a> -> <a href="http://172.20.10.2:4500" target="_blank">172.20.10.2:4500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : - ipsec-esp spi =
0x11134bca</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : - data size 12</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : phase2 ids accepted</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : - loc
ANY:135.244.1.243:* -> ANY:<a href="http://0.0.0.0/0:*" target="_blank">0.0.0.0/0:*</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : - rmt
ANY:<a href="http://0.0.0.0/0:*" target="_blank">0.0.0.0/0:*</a> -> ANY:135.244.1.243:*</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : phase2 sa
established</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 22:53:23 ii : <a href="http://172.20.10.2:4500" target="_blank">172.20.10.2:4500</a>
<-> <a href="http://135.244.31.254:4500" target="_blank">135.244.31.254:4500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)">13/10/30
22:53:23 >= : cookies 594fc69bad4dd2e4:98c94bc25b464bc5</span></p>
<p class="MsoNormal"><span style="font-size:7pt;line-height:107%;font-family:Courier;color:rgb(0,92,92)">13/10/30 22:53:23 >= :
message d4143a8a</span></p></div><div><br></div><div>I tried disabling NAT-T or Policy Generation to "Unique" (from auto) but continue failing:</div><div><br></div><div><p class="MsoNormal" style="margin-bottom:0.0001pt">
<span style="font-family:Courier;font-size:7pt">...</span></p><p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="color:rgb(0,92,92);font-family:Courier;font-size:7pt">13/10/30 23:34:11 >= : cookies
b80be3b5dbceeb8b:</span><span style="color:rgb(0,92,92);font-family:Courier;font-size:7pt">ee028b0319409d9c</span><br></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)" lang="EN-US">13/10/30 23:34:11 >= : message
2758cac5</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 23:34:16 -> : resend 1
phase2 packet(s) [0/2] <a href="http://192.168.1.106:500" target="_blank">192.168.1.106:500</a> -> <a href="http://135.244.31.254:500" target="_blank">135.244.31.254:500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)">13/10/30
23:34:21 -> : resend 1 phase2 packet(s) [1/2] <a href="http://192.168.1.106:500" target="_blank">192.168.1.106:500</a> ->
<a href="http://135.244.31.254:500" target="_blank">135.244.31.254:500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 23:34:26 -> : resend 1
phase2 packet(s) [2/2] <a href="http://192.168.1.106:500" target="_blank">192.168.1.106:500</a> -> <a href="http://135.244.31.254:500" target="_blank">135.244.31.254:500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)" lang="EN-US">13/10/30 23:34:27 >= : cookies
b80be3b5dbceeb8b:ee028b0319409d9c</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)" lang="EN-US">13/10/30 23:34:27 >= : message
0d575009</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;background-color:yellow;font-family:Courier" lang="EN-US">13/10/30
23:34:31 ii : resend limit exceeded for phase2 exchange</span><span style="font-size:7pt;font-family:Courier" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 23:34:31 ii : phase2 removal
before expire time</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 23:34:32 -> : resend 1
phase2 packet(s) [0/2] <a href="http://192.168.1.106:500" target="_blank">192.168.1.106:500</a> -> <a href="http://135.244.31.254:500" target="_blank">135.244.31.254:500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 23:34:37 -> : resend 1
phase2 packet(s) [1/2] <a href="http://192.168.1.106:500" target="_blank">192.168.1.106:500</a> -> <a href="http://135.244.31.254:500" target="_blank">135.244.31.254:500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)" lang="EN-US">13/10/30 23:34:42 -> : resend 1
phase2 packet(s) [2/2] <a href="http://192.168.1.106:500" target="_blank">192.168.1.106:500</a> -> <a href="http://135.244.31.254:500" target="_blank">135.244.31.254:500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)" lang="EN-US">13/10/30 23:34:43 >= : cookies
b80be3b5dbceeb8b:ee028b0319409d9c</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(0,92,92)" lang="EN-US">13/10/30 23:34:43 >= : message
077b253a</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;background-color:yellow;font-family:Courier" lang="EN-US">13/10/30
23:34:47 ii : resend limit exceeded for phase2 exchange</span><span style="font-size:7pt;font-family:Courier" lang="EN-US"></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 23:34:47 ii : phase2 removal
before expire time</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier;color:rgb(32,128,32)">13/10/30
23:34:48 -> : resend 1 phase2 packet(s) [0/2] <a href="http://192.168.1.106:500" target="_blank">192.168.1.106:500</a> ->
<a href="http://135.244.31.254:500" target="_blank">135.244.31.254:500</a></span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><span style="font-size:7pt;font-family:Courier" lang="EN-US">13/10/30 23:34:48 <A : peer tunnel
disable message</span></p>
<p class="MsoNormal" style="margin-bottom:0.0001pt"><br></p></div><div>Any clue on what may wrong?</div><div><br></div><div>Thanks very much</div><div>-f</div><div><br></div><div>I am running 2.2.2 on Win 7</div>
</div>
</div><br></div>
<br>_______________________________________________<br>
vpn-help mailing list<br>
<a href="mailto:vpn-help@lists.shrew.net">vpn-help@lists.shrew.net</a><br>
<a href="https://lists.shrew.net/mailman/listinfo/vpn-help" target="_blank">https://lists.shrew.net/mailman/listinfo/vpn-help</a><br>
<br></blockquote></div><br></div></div></div></div></div></div></div>