16 Feb 2024 |
wubot | <michel> config_free_proposals: free 0x1bdb8e81e0 | 12:44:33 |
wubot | <michel> config_free_flows: free 0x1bdb90d800 | 12:44:38 |
wubot | <michel> ca exiting, pid 91498 | 12:44:43 |
wubot | <michel> control exiting, pid 372 | 12:44:48 |
wubot | <michel> config_doreset: flushing users | 12:44:53 |
wubot | <michel> ikev2 exiting, pid 68573 | 12:44:58 |
wubot | <michel> parent terminating | 12:45:03 |
wubot | <michel> Here is the LOG iked -vv but the parameters differ, since this is a test vpn setup | 12:45:08 |
wubot | <michel> Any support on this ? | 13:11:45 |
wubot | <michel> @wubot_ now I get a diffent error message: spi=0x9a2ab90123874927: sa_state: cannot switch: AUTH_SUCCESS -> VALID | 13:56:47 |
tobhe | can you upload the log as a file somewhere? | 14:13:51 |
tobhe | this ends a little to early | 14:14:01 |
wubot | <michel> http://nsas.de/bla.log | 14:38:14 |
wubot | <michel> @wubot_ http://nsas.de/bla.log | 14:38:33 |
tobhe | ok so this looks better | 14:43:03 |
tobhe | TS_UNACCEPTABLE might be the problem | 14:44:42 |
wubot | <michel> I saw that too, but what does it mean | 14:45:07 |
tobhe | that means either of from 192.168.2.0/24 to 100.70.7.179 \ or from 192.168.16.0/24 to 100.70.7.179 \ isn't liked by the other side | 14:45:48 |
tobhe | maybe try dropping one of those and see if that works | 14:46:09 |
wubot | <michel> wait, I try | 14:46:26 |
wubot | <michel> FLOWS: | 14:49:24 |
wubot | <michel> flow esp in from 100.70.7.179 to 192.168.20.1 peer 89.184.160.253 srcid UFQDN/office6729@mig10.de dstid UFQDN/tunnel@swyxon.com type require | 14:49:26 |
wubot | <michel> flow esp out from 192.168.20.1 to 100.70.7.179 peer 89.184.160.253 srcid UFQDN/office6729@mig10.de dstid UFQDN/tunnel@swyxon.com type require | 14:49:28 |
wubot | <michel> SAD: | 14:49:30 |
wubot | <michel> esp tunnel from 89.184.160.253 to 10.192.40.103 spi 0x4351deb1 auth hmac-sha2-256 enc aes-256 | 14:49:32 |
wubot | <michel> esp tunnel from 10.192.40.103 to 89.184.160.253 spi 0x4d2202bb auth hmac-sha2-256 enc aes-256 | 14:49:34 |
wubot | <michel> got it | 14:49:36 |
tobhe | we should make this a louder error then | 14:50:01 |
wubot | <michel> @wubot_ thx man | 14:50:01 |
tobhe | shouldn't need -vv 🙂 | 14:50:11 |