Netgear VPN issue

[jonstrasser]

Hi all
I am a home user with a good amount of network experience. I have a Netgear FVS338 and have a VPN that I have set up with my MacPro with IPSecuritas. This has been working flawlessless, but today, all of a sudden I am getting an error that says HASH mismatch. I've posted below the logs from both IP securitas (first) and then the Netgear box (second). If anyone has any ideas I would be greatly appreciative as I am unable to connect

IPSecuritas 3.2 build 2501, Do 1 Jan 2009 19:18:38 CET, nadig
Darwin 9.5.0 Darwin Kernel Version 9.5.0: Wed Sep 3 11:29:43 PDT 2008; root:xnu-1228.7.58~1/RELEASE_I386 i386

Mar 25, 09:57:40 Info APP IPSec authenticating
Mar 25, 09:57:40 Info APP Connection Remote Access is started
Mar 25, 09:57:40 Info APP IKE daemon started
Mar 25, 09:57:40 Info APP IPSec started
Mar 25, 09:57:40 Error IKE Foreground mode.
Mar 25, 09:57:40 Info IKE @(#)ipsec-tools CVS (

http://ipsec-tools.sourceforge.net)

Mar 25, 09:57:40 Info IKE @(#)This product linked OpenSSL 0.9.7l 28 Sep 2006 (

http://www.openssl.org/)

Mar 25, 09:57:40 Info IKE Reading configuration from "/Library/Application Support/Lobotomo Software/IPSecuritas/racoon.conf"
Mar 25, 09:57:40 Info IKE Resize address pool from 0 to 255
Mar 25, 09:57:40 Info APP Initiated connection Remote Access
Mar 25, 09:57:41 Error IKE HASH mismatched
Mar 25, 09:57:45 Error IKE HASH mismatched
Mar 25, 09:57:47 Info APP Initiated connection Remote Access
Mar 25, 09:57:50 Error IKE HASH mismatched
Mar 25, 09:57:52 Error IKE HASH mismatched
Mar 25, 09:57:54 Info APP Initiated connection Remote Access
Mar 25, 09:57:55 Error IKE HASH mismatched
Mar 25, 09:57:56 Error IKE phase2 negotiation failed due to time up waiting for phase1. ESP 69.253.28.231[500]->192.168.2.182[500]
Mar 25, 09:58:00 Error IKE HASH mismatched
Mar 25, 09:58:01 Info APP Initiated connection Remote Access
Mar 25, 09:58:02 Error IKE HASH mismatched
Mar 25, 09:58:03 Error IKE phase2 negotiation failed due to time up waiting for phase1. ESP 69.253.28.231[500]->192.168.2.182[500]
Mar 25, 09:58:05 Error IKE HASH mismatched
Mar 25, 09:58:08 Info APP Initiated connection Remote Access
Mar 25, 09:58:10 Error IKE phase1 negotiation failed due to time up. 3d133d7209b044cd:8e6e79d28bd5a37d
Mar 25, 09:58:10 Error IKE phase2 negotiation failed due to time up waiting for phase1. ESP 69.253.28.231[500]->192.168.2.182[500]
Mar 25, 09:58:13 Warning APP Connection Remote Access timed out
Mar 25, 09:58:13 Warning APP Giving up
Mar 25, 09:58:17 Error IKE phase2 negotiation failed due to time up waiting for phase1. ESP 69.253.28.231[500]->192.168.2.182[500]
Mar 25, 09:58:17 Info APP IPSec stopping
Mar 25, 09:58:18 Info APP IKE daemon terminated
Mar 25, 09:58:18 Info APP IPSec stopped

From Router
88.138.42[500]. f565b0ca6617a7f4:083ec556768d58d0_
2010 Mar 25 09:54:52 [FVS338] [IKE] Remote configuration for identifier "fvx_remote.com" found_
2010 Mar 25 09:54:52 [FVS338] [IKE] Received request for new phase 1 negotiation: 69.253.28.231[500]<=>70.188.138.42[500]_
2010 Mar 25 09:54:52 [FVS338] [IKE] Beginning Aggressive mode._
2010 Mar 25 09:54:52 [FVS338] [IKE] Received unknown Vendor ID_
- Last output repeated twice -
2010 Mar 25 09:54:56 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:54:56 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
2010 Mar 25 09:55:01 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:55:01 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
- Last output repeated twice -
2010 Mar 25 09:55:06 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:55:06 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
2010 Mar 25 09:55:13 [FVS338] [IKE] Remote configuration for identifier "fvx_remote.com" found_
2010 Mar 25 09:55:13 [FVS338] [IKE] Received request for new phase 1 negotiation: 69.253.28.231[500]<=>70.188.138.42[500]_
2010 Mar 25 09:55:13 [FVS338] [IKE] Beginning Aggressive mode._
2010 Mar 25 09:55:13 [FVS338] [IKE] Received unknown Vendor ID_
- Last output repeated twice -
2010 Mar 25 09:55:14 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
2010 Mar 25 09:55:17 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:55:17 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
2010 Mar 25 09:55:22 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:55:22 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
- Last output repeated twice -
2010 Mar 25 09:55:27 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:55:27 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
2010 Mar 25 09:55:32 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:55:32 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
- Last output repeated twice -
2010 Mar 25 09:55:37 [FVS338] [IKE] The packet is retransmitted by 70.188.138.42[500]._
2010 Mar 25 09:55:37 [FVS338] [IKE] Ignore information because ISAKMP-SA has not been established yet._
2010 Mar 25 09:55:54 [FVS338] [IKE] Phase 1 negotiation failed due to time up for 70.188.138.42[500]. 5816d7c21aa2f2cb:8fe3156e57913616_
2010 Mar 25 09:56:14 [FVS338] [IKE] Phase 1 negotiation failed due to time up for 70.188.138.42[500]. 3d133d7209b044cd:8e6e79d28bd5a37d_

 

[Noway2]

Are you still having troubles?

This error sounds like there has been a change in the encryption keys or protocols. Perhaps a certificate expired?

I did come across this link which may help (its long - several pages):

http://www.networkworld.com/subnets/cisco/1114-ch4-ipsec-vpn.html