west-console.txt

ipsec vpn

west:~#
 named
west:~#
 route delete -net 192.0.2.0 netmask 255.255.255.0
west:~#
 route delete -net default
west:~#
 route add -net default gw 192.1.2.23
west:~#
 ipsec setup start
ipsec_setup: Starting Openswan IPsec VERSION
west:~#
 ipsec auto --add us-to-anyone
west:~#
 /testing/pluto/basic-pluto-01/eroutewait.sh trap
west:~#
 : let my people go - let all packets not otherwise dealt with out in the
west:~#
 : clear, despite stoopid routing tricks.
west:~#
 ipsec auto --delete packetdefault
west:~#
 ipsec manual --up let-my-people-go
west:~#
 

west:~#
 grep us-to-anyone /tmp/pluto.log | sed 's/\(Message ID 0x\)[0-9a-f]*/\1FFFFFFFF/'
added connection description "us-to-anyone"
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: responding to Main Mode from unknown peer 192.1.2.23
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: transition from state STATE_MAIN_R0 to state STATE_MAIN_R1
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: STATE_MAIN_R1: sent MR1, expecting MI2
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: transition from state STATE_MAIN_R1 to state STATE_MAIN_R2
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: STATE_MAIN_R2: sent MR2, expecting MI3
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: Main mode peer ID is ID_IPV4_ADDR: '192.1.2.23'
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: Main mode peer ID is ID_IPV4_ADDR: '192.1.2.23'
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: I did not send a certificate because I do not have one.
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: transition from state STATE_MAIN_R2 to state STATE_MAIN_R3
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: STATE_MAIN_R3: sent MR3, ISAKMP SA established {auth=OAKLEY_RSA_SIG cipher=oakley_3des_cbc_192 prf=oakley_md5 group=modp1536}
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: gateway 192.1.2.23 wants connection with 192.0.1.1 as our client, but DNS fails to confirm delegation: RR of type TXT for 1.1.0.192.in-addr.arpa. was not found (tried CNAMEs) 
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: sending encrypted notification INVALID_ID_INFORMATION to 192.1.2.23:500
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: failed to build notification for spisize=0 
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0xFFFFFFFF (perhaps this is a duplicated packet)
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: sending encrypted notification INVALID_MESSAGE_ID to 192.1.2.23:500
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: failed to build notification for spisize=0 
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: Quick Mode I1 message is unacceptable because it uses a previously used Message ID 0xFFFFFFFF (perhaps this is a duplicated packet)
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: sending encrypted notification INVALID_MESSAGE_ID to 192.1.2.23:500
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: failed to build notification for spisize=0 
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===? #1: received Delete SA payload: deleting ISAKMP State #1
"us-to-anyone"[1] 192.0.1.0/24=== ...192.1.2.23===?: deleting connection "us-to-anyone" instance with peer 192.1.2.23
west:~#
west:~#