<div dir="ltr"><div>Hello All,</div><div><br></div><div>I have the following issue when connecting a libreswan server and a remote IPSec peer (non libreswan)</div><div><br></div><div>my libreswan is running on ubuntu 14.04 LTS</div><div><br></div><div><br></div><div>During key renegotiation I see the following messages in the logs</div><div><br></div><div><div>Jan 9 09:10:20 hostname pluto[7888]: "connection/6x6" #35475: the peer proposed: <a href="http://192.168.48.0/20:0/0">192.168.48.0/20:0/0</a> -> <a href="http://100.16.2.200/32:0/0">100.16.2.200/32:0/0</a></div></div><div><br></div><div>Jan 9 09:10:20 hostname pluto[7888]: "connection/4x5" #35476: <b>ENCAPSULATION_MODE_UDP_TUNNEL_DRAFTS</b> must only be used with old IETF drafts</div><div><br></div><div>Jan 9 09:10:20 hostname pluto[7888]: "connection/4x5" #35476: sending encrypted notification <b>BAD_PROPOSAL_SYNTAX</b> to X.X.X.X:4500 </div><div><br></div><div><br></div><div>The connection configuration (removed some left/right subnets to simplify)</div><div><br></div><div><br></div><div><div>conn connection</div><div> authby=secret<br></div><div> auto=start</div><div> dpdaction=restart_by_peer</div><div> dpddelay=30</div><div> dpdtimeout=120</div><div> forceencaps=no</div><div> ike=aes256-sha1;modp1024</div><div> ikelifetime=28800s</div><div> keyingtries=3</div><div> left=local IP</div><div> leftid=my id</div><div> leftsubnets=<a href="http://192.168.48.0/20.">192.168.48.0/20.</a>..</div><div> pfs=no<br></div><div> phase2alg=aes256-sha1</div><div> right=remote ip</div><div> rightid=remote id</div><div> rightsubnets=<a href="http://100.16.2.200/32.">100.16.2.200/32.</a>..</div><div> salifetime=3600s</div><div> type=tunnel</div></div><div><br></div><div><br></div><div>What does the ENCAPSULATION_MODE_UDP_TUNNEL_DRAFTS message mean?</div><div>what should I do to fix this (do I need to fix it)?</div><div><br></div><div>Appriciate your insight </div><div><br></div><div>Amir</div><div><br></div><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><p style="margin:0cm 0cm 0.0001pt;font-size:12.8px;font-family:Calibri;color:rgb(136,136,136)"><b><span style="font-size:10.5pt;color:rgb(255,99,0)">Amir Naftali</span></b><span style="font-size:10.5pt;color:rgb(89,89,89)">|</span><span style="font-size:10.5pt;color:gray"> </span><b><span style="font-size:10.5pt;color:rgb(89,89,89)">CTO 40Cloud</span></b><span style="font-size:10.5pt;color:rgb(89,89,89)">|</span><b><span style="font-size:10.5pt;color:rgb(127,127,127)"> </span></b><b><span style="font-size:10.5pt;color:rgb(255,99,0)">FireMon</span></b><b><span style="font-size:10.5pt;color:rgb(0,130,192)"></span></b></p><p style="margin:0cm 0cm 0.0001pt;font-size:12.8px;font-family:Calibri;color:rgb(136,136,136)"><span style="font-size:10.5pt;color:rgb(255,99,0)">D:</span><span style="font-size:10.5pt;color:rgb(89,89,89)"> </span><span style="font-size:10.5pt;color:rgb(127,127,127)">+972.73.3905722</span><span style="font-size:10.5pt;color:rgb(89,89,89)">| </span><span style="font-size:10.5pt;color:rgb(255,99,0)">C:</span><b><span style="font-size:10.5pt;color:rgb(237,125,49)"> </span></b><span style="font-size:10.5pt;color:rgb(127,127,127)">+972.54.4972622</span><span style="font-size:10.5pt;color:rgb(89,89,89)"></span></p><p style="margin:0cm 0cm 0.0001pt;font-size:12.8px;font-family:Calibri;color:rgb(136,136,136)"><span style="font-size:10.5pt"><a href="mailto:amir.naftali@firemon.com" style="color:rgb(149,79,114)" target="_blank">amir@</a><a href="http://fortycloud.com" target="_blank">fortycloud.com</a></span><span style="color:rgb(127,127,127)"> </span><span style="color:rgb(89,89,89)">|</span><span style="color:rgb(127,127,127)"> </span><b style="color:rgb(89,89,89);font-size:14px"><i><a href="http://www.40cloud.com/" style="color:rgb(149,79,114);font-style:normal" target="_blank">www.40cloud.com</a></i></b></p><span style="font-size:12.8px"></span><p style="margin:0cm 0cm 0.0001pt;font-size:12.8px;font-family:Calibri;color:rgb(136,136,136)"><b style="font-size:11pt"><i><span style="font-size:10.5pt;color:rgb(89,89,89)"><br></span></i></b></p><p style="margin:0cm 0cm 0.0001pt;font-size:11pt;font-family:Calibri"><font color="#595959"><span style="font-size:14px"><b><i>40Cloud - Making Your Public Cloud Private</i></b></span></font></p></div></div></div>
</div>