[Swan] INVALID_KEY_INFORMATION
John Crisp
jcrisp at safeandsoundit.co.uk
Fri Aug 5 14:41:46 UTC 2016
On 05/08/16 16:26, Paul Wouters wrote:
> On Fri, 5 Aug 2016, John Crisp wrote:
>
>> I am using Libre 3.18 but have seen the same issue on previous versions.
>> Libre connects with a Draytek router.
>>
>> I seem to get a lot of this in my logs:
>>
>> "ignoring informational payload INVALID_KEY_INFORMATION"
>>
>> I can see that this is informational, and can be ignored, but wanted to
>> know what the cause was and if I can get around it as it fills my logs
>> at a fairly high rate !
>
> From my dealings with Draytek 10 years ago, there were various big
> issues with their IKE software. One of the things is that "always on"
> did hugely different things and require different settings, something
> you would not expect where the only difference should be "load" or
> "load and initiate".
>
Yes I am used to some of their peculiarities ;-)
> I can't really help you. If it works in the non-alwayson mode, and
> does not in the alwayson mode, it is mostly likely a configuration
> oddity they need or just a bug in their software. You'll have to
> try and talk to the vendor.
OK but just to note that it's the other way round as per my comment:
>> I note that if I set the router to be always on, and set Libre to
>> auto=add I no longer get the messages.
So if the router is AlwaysOn and Libre is auto=add then no messages and
all is quiet on the Western Front.
If I put Libre into auto=start we have a scene resembling something from
the Somme in the logs with it continuously reconnecting :-)
I can live with it with auto=add, and will be ousting said routers as
soon as I can (because talking to their tech support is
errrrr........!), but I was just curious as to what was going on and why.
B. Rgds
John
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: OpenPGP digital signature
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20160805/f2110743/attachment.sig>
More information about the Swan
mailing list