Skip to content

Instantly share code, notes, and snippets.

@cjac
Created April 24, 2020 20:29
Show Gist options
  • Save cjac/1812f3addebf4d5f5960079bad64438f to your computer and use it in GitHub Desktop.
Save cjac/1812f3addebf4d5f5960079bad64438f to your computer and use it in GitHub Desktop.
cjac@wanjet1:~$ sudo ipsec up edge
initiating IKE_SA edge[3] to 74.120.12.135
generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
sending packet: from 73.53.45.61[500] to 74.120.12.135[500] (1124 bytes)
received packet: from 74.120.12.135[500] to 73.53.45.61[500] (38 bytes)
parsed IKE_SA_INIT response 0 [ N(INVAL_KE) ]
peer didn't accept DH group MODP_3072, it requested ECP_256
initiating IKE_SA edge[3] to 74.120.12.135
generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(REDIR_SUP) ]
sending packet: from 73.53.45.61[500] to 74.120.12.135[500] (804 bytes)
received packet: from 74.120.12.135[500] to 73.53.45.61[500] (272 bytes)
parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(FRAG_SUP) N(HASH_ALG) N(MULT_AUTH) ]
authentication of 'wanjet1.colliertech.org' (myself) with pre-shared key
establishing CHILD_SA edge
generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr AUTH SA TSi TSr N(MULT_AUTH) N(EAP_ONLY) ]
sending packet: from 73.53.45.61[500] to 74.120.12.135[500] (352 bytes)
received packet: from 74.120.12.135[500] to 73.53.45.61[500] (128 bytes)
parsed IKE_AUTH response 1 [ IDr AUTH N(TS_UNACCEPT) ]
authentication of 'edge.colliertech.org' with pre-shared key successful
IKE_SA edge[3] established between 73.53.45.61[wanjet1.colliertech.org]...74.120.12.135[edge.colliertech.org]
scheduling rekeying in 603842s
maximum IKE_SA lifetime 604442s
received TS_UNACCEPTABLE notify, no CHILD_SA built
failed to establish CHILD_SA, keeping IKE_SA
establishing connection 'edge' failed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment