Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > VPN: Site to Site and Remote Access

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 07-06-2009, 01:56 PM
Junior Member
 
Join Date: Jul 2009
Posts: 1
Default VPN with MS ISA Server 2004

Hello,

our site2site vpn works fine.

But the log on the Astaro (Version 7403) show this errors:

2009:07:06-13:11:27 Astaro pluto[23917]: "S_Unknown Object" #2395: received Delete SA payload: deleting ISAKMP State #2395
2009:07:06-13:11:27 Astaro pluto[23917]: packet from ***.***.238.98:500: ignoring Vendor ID payload [MS NT5 ISAKMPOAKLEY 00000004]
2009:07:06-13:11:27 Astaro pluto[23917]: packet from ***.***.238.98:500: ignoring Vendor ID payload [FRAGMENTATION]
2009:07:06-13:11:27 Astaro pluto[23917]: packet from ***.***.238.98:500: received Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2009:07:06-13:11:27 Astaro pluto[23917]: "S_Unknown Object" #2397: responding to Main Mode
2009:07:06-13:11:28 Astaro pluto[23917]: "S_Unknown Object" #2397: NAT-Traversal: Result using draft-ietf-ipsec-nat-t-ike-02/03: no NAT detected
2009:07:06-13:11:28 Astaro pluto[23917]: "S_Unknown Object" #2397: Peer ID is ID_IPV4_ADDR: '***.***.238.98'
2009:07:06-13:11:28 Astaro pluto[23917]: "S_Unknown Object" #2397: sent MR3, ISAKMP SA established
2009:07:06-13:11:28 Astaro pluto[23917]: "S_Unknown Object" #2397: cannot respond to IPsec SA request because no connection is known for 192.168.2.0/24===***.***.74.102...***.***.238.98
2009:07:06-13:11:28 Astaro pluto[23917]: "S_Unknown Object" #2397: sending encrypted notification INVALID_ID_INFORMATION to ***.***.238.98:500
2009:07:06-13:11:28 Astaro pluto[23917]: "S_Unknown Object" #2397: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x88bb63a4 (perhaps this is a duplicated packet)
2009:07:06-13:11:28 Astaro pluto[23917]: "S_Unknown Object" #2397: sending encrypted notification INVALID_MESSAGE_ID to ***.***.238.98:500
2009:07:06-13:11:30 Astaro pluto[23917]: "S_Unknown Object" #2397: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x88bb63a4 (perhaps this is a duplicated packet)
2009:07:06-13:11:30 Astaro pluto[23917]: "S_Unknown Object" #2397: sending encrypted notification INVALID_MESSAGE_ID to ***.***.238.98:500
2009:07:06-13:11:35 Astaro pluto[23917]: "S_Unknown Object" #2397: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x88bb63a4 (perhaps this is a duplicated packet)
2009:07:06-13:11:35 Astaro pluto[23917]: "S_Unknown Object" #2397: sending encrypted notification INVALID_MESSAGE_ID to ***.***.238.98:500
2009:07:06-13:11:43 Astaro pluto[23917]: "S_Unknown Object" #2397: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x88bb63a4 (perhaps this is a duplicated packet)
2009:07:06-13:11:43 Astaro pluto[23917]: "S_Unknown Object" #2397: sending encrypted notification INVALID_MESSAGE_ID to ***.***.238.98:500
2009:07:06-13:11:59 Astaro pluto[23917]: "S_Unknown Object" #2397: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x88bb63a4 (perhaps this is a duplicated packet)
2009:07:06-13:11:59 Astaro pluto[23917]: "S_Unknown Object" #2397: sending encrypted notification INVALID_MESSAGE_ID to ***.***.238.98:500
2009:07:06-13:13:21 Astaro pluto[23917]: "S_Unknown Object" #2397: cannot respond to IPsec SA request because no connection is known for 192.168.2.0/24===***.***.74.102...***.***.238.98
2009:07:06-13:13:21 Astaro pluto[23917]: "S_Unknown Object" #2397: sending encrypted notification INVALID_ID_INFORMATION to ***.***.238.98:500
2009:07:06-13:13:23 Astaro pluto[23917]: "S_Unknown Object" #2397: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0x15e46946 (perhaps this is a duplicated packet)
2009:07:06-13:13:23 Astaro pluto[23917]: "S_Unknown Object" #2397: sending encrypted notification INVALID_MESSAGE_ID to ***.***.238.98:500

Does anybody have an Idee what this means?

Frank
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 03:44 PM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.