Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Netgear VPN issue

Status
Not open for further replies.

jonstrasser

Technical User
Mar 25, 2010
1
US
Hi all
I am a home user with a good amount of network experience. I have a Netgear FVS338 and have a VPN that I have set up with my MacPro with IPSecuritas. This has been working flawlessless, but today, all of a sudden I am getting an error that says HASH mismatch. I've posted below the logs from both IP securitas (first) and then the Netgear box (second). If anyone has any ideas I would be greatly appreciative as I am unable to connect

IPSecuritas 3.2 build 2501, Do 1 Jan 2009 19:18:38 CET, nadig
Darwin 9.5.0 Darwin Kernel Version 9.5.0: Wed Sep 3 11:29:43 PDT 2008; root:xnu-1228.7.58~1/RELEASE_I386 i386

Mar 25, 09:57:40 Info APP IPSec authenticating
Mar 25, 09:57:40 Info APP Connection Remote Access is started
Mar 25, 09:57:40 Info APP IKE daemon started
Mar 25, 09:57:40 Info APP IPSec started
Mar 25, 09:57:40 Error IKE Foreground mode.
Mar 25, 09:57:40 Info IKE @(#)ipsec-tools CVS (Mar 25, 09:57:40 Info IKE @(#)This product linked OpenSSL 0.9.7l 28 Sep 2006 (Mar 25, 09:57:40 Info IKE Reading configuration from "/Library/Application Support/Lobotomo Software/IPSecuritas/racoon.conf"
Mar 25, 09:57:40 Info IKE Resize address pool from 0 to 255
Mar 25, 09:57:40 Info APP Initiated connection Remote Access
Mar 25, 09:57:41 Error IKE HASH mismatched
Mar 25, 09:57:45 Error IKE HASH mismatched
Mar 25, 09:57:47 Info APP Initiated connection Remote Access
Mar 25, 09:57:50 Error IKE HASH mismatched
Mar 25, 09:57:52 Error IKE HASH mismatched
Mar 25, 09:57:54 Info APP Initiated connection Remote Access
Mar 25, 09:57:55 Error IKE HASH mismatched
Mar 25, 09:57:56 Error IKE phase2 negotiation failed due to time up waiting for phase1. ESP 69.253.28.231[500]->192.168.2.182[500]
Mar 25, 09:58:00 Error IKE HASH mismatched
Mar 25, 09:58:01 Info APP Initiated connection Remote Access
Mar 25, 09:58:02 Error IKE HASH mismatched
Mar 25, 09:58:03 Error IKE phase2 negotiation failed due to time up waiting for phase1. ESP 69.253.28.231[500]->192.168.2.182[500]
Mar 25, 09:58:05 Error IKE HASH mismatched
Mar 25, 09:58:08 Info APP Initiated connection Remote Access
Mar 25, 09:58:10 Error IKE phase1 negotiation failed due to time up. 3d133d7209b044cd:8e6e79d28bd5a37d
Mar 25, 09:58:10 Error IKE phase2 negotiation failed due to time up waiting for phase1. ESP 69.253.28.231[500]->192.168.2.182[500]
Mar 25, 09:58:13 Warning APP Connection Remote Access timed out
Mar 25, 09:58:13 Warning APP Giving up
Mar 25, 09:58:17 Error IKE phase2 negotiation failed due to time up waiting for phase1. ESP 69.253.28.231[500]->192.168.2.182[500]
Mar 25, 09:58:17 Info APP IPSec stopping
Mar 25, 09:58:18 Info APP IKE daemon terminated
Mar 25, 09:58:18 Info APP IPSec stopped

From Router
88.138.42[500]. f565b0ca6617a7f4:083ec556768d58d0_
2010 Mar 25 09:54:52 [FVS338] [IKE] Remote configuration for identifier "fvx_remote.com" found_
2010 Mar 25 09:54:52 [FVS338] [IKE] Received request for new phase 1 negotiation: 69.253.28.231[500]<=>70.188.138.42[500]_
2010 Mar 25 09:54:52 [FVS338] [IKE] Beginning Aggressive mode._
2010 Mar 25 09:54:52 [FVS338] [IKE] Received unknown Vendor ID_
- Last output repeated twice -
2010 Mar 25 09:54:56 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:54:56 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
2010 Mar 25 09:55:01 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:55:01 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
- Last output repeated twice -
2010 Mar 25 09:55:06 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:55:06 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
2010 Mar 25 09:55:13 [FVS338] [IKE] Remote configuration for identifier "fvx_remote.com" found_
2010 Mar 25 09:55:13 [FVS338] [IKE] Received request for new phase 1 negotiation: 69.253.28.231[500]<=>70.188.138.42[500]_
2010 Mar 25 09:55:13 [FVS338] [IKE] Beginning Aggressive mode._
2010 Mar 25 09:55:13 [FVS338] [IKE] Received unknown Vendor ID_
- Last output repeated twice -
2010 Mar 25 09:55:14 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
2010 Mar 25 09:55:17 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:55:17 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
2010 Mar 25 09:55:22 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:55:22 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
- Last output repeated twice -
2010 Mar 25 09:55:27 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:55:27 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
2010 Mar 25 09:55:32 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:55:32 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
- Last output repeated twice -
2010 Mar 25 09:55:37 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:55:37 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
2010 Mar 25 09:55:54 [FVS338] [IKE] Phase 1 negotiation failed due to time up for 70.188.138.42[500]. 5816d7c21aa2f2cb:8fe3156e57913616_
2010 Mar 25 09:56:14 [FVS338] [IKE] Phase 1 negotiation failed due to time up for 70.188.138.42[500]. 3d133d7209b044cd:8e6e79d28bd5a37d_
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top