All pastes #794070 Raw Edit

Stuff

public text v1 · immutable
·published 2007-11-22 21:21 UTC
rendered paste body
Agressive mode off:
  router:~# ipsec whack --name sonicwall --initiate
  002 "sonicwall" #1: initiating Main Mode
  104 "sonicwall" #1: STATE_MAIN_I1: initiate
  010 "sonicwall" #1: STATE_MAIN_I1: retransmission; will wait 20s for response
  010 "sonicwall" #1: STATE_MAIN_I1: retransmission; will wait 40s for response

Agressive mode on:
  router:~# ipsec whack --name sonicwall --initiate
  003 "sonicwall" #1: multiple transforms were set in aggressive mode. Only first one used.
  003 "sonicwall" #1: transform (5,2,2,0) ignored.
  003 "sonicwall" #1: transform (7,1,2,0) ignored.
  003 "sonicwall" #1: transform (7,2,2,0) ignored.
  002 "sonicwall" #1: initiating Aggressive Mode #1, connection "sonicwall"
  003 "sonicwall" #1: multiple transforms were set in aggressive mode. Only first one used.
  003 "sonicwall" #1: transform (5,2,2,0) ignored.
  003 "sonicwall" #1: transform (7,1,2,0) ignored.
  003 "sonicwall" #1: transform (7,2,2,0) ignored.
  112 "sonicwall" #1: STATE_AGGR_I1: initiate

Status:
  000 "sonicwall": X.X.X.X[@XXXXX,XC+S=C]...X.X.X.X[@XXXXXXXXXXX,XS+S=C]===192.168.16.11/32; unrouted; eroute owner: #0
  000 "sonicwall":     srcip=unset; dstip=unset; srcup=ipsec _updown; dstup=ipsec _updown;
  000 "sonicwall":   ike_life: 3600s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
  000 "sonicwall":   policy: PSK+ENCRYPT+TUNNEL+UP+AGGRESSIVE; prio: 32,32; interface: eth-public; 
  000 "sonicwall":   newest ISAKMP SA: #0; newest IPsec SA: #0; 
  000 "sonicwall":   IKE algorithms wanted: 5_000-1-2, 5_000-2-2, 7_000-1-2, 7_000-2-2, flags=strict
  000 "sonicwall":   IKE algorithms found:  5_192-1_128-2, 5_192-2_160-2, 7_128-1_128-2, 7_128-2_160-2, 
  000 "sonicwall":   ESP algorithms wanted: 3_000-2, flags=strict
  000 "sonicwall":   ESP algorithms loaded: 3_000-2, flags=strict