[Swan] Problems converting from OpenSWAN to LibreSWAN

[Paul Wouters]

On Wed, 7 May 2014, Nels Lindquist wrote:

>> May  7 07:57:10 mail pluto[28834]: | sending IKE fragment id '1',
>> number '1'
>>
>> Can you try with both ike_frag=force and ike_frag=no ?
>
> With ike_frag=force we get additional lines (discarding duplicate
> packet; already STATE_MAIN_R2); with ike_frag=no the behaviour is the
> same as before.  Would you like "plutodebug=all" logs for either or
> both of these settings?

Hmm. I don't think that will help as it is the other end that is
unhappy. Have you tried this with another device, eg an iphone in L2TP
mode or something? Just as reference?

> May  7 13:45:04 mail pluto[14792]: "L2TP-Win2KXP"[1] 209.82.26.89 #6:
> discarding duplicate packet; already STATE_MAIN_R2

Is there a way to get the ipsec logs from the Windows machine to find
out what it is complaining about?

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/sag_ipsec_tools.mspx?mfr=true

Paul