Jan 25 15:01:35 blackhole racoon: INFO: @(#)ipsec-tools 0.3.3 (http://ipsec-tools.sourceforge.net) Jan 25 15:01:35 blackhole racoon: INFO: @(#)This product linked OpenSSL 0.9.7a Feb 19 2003 (http://www.openssl.org/) Jan 25 15:01:35 blackhole racoon: INFO: 10.100.102.1[500] used as isakmp port (fd=8) Jan 25 15:01:35 blackhole racoon: INFO: 10.20.20.101[500] used as isakmp port (fd=9) Jan 25 15:01:35 blackhole racoon: INFO: 10.0.0.2[500] used as isakmp port (fd=10) Jan 25 15:01:35 blackhole racoon: INFO: 212.26.128.69[500] used as isakmp port (fd=11) Jan 25 15:01:35 blackhole racoon: INFO: 127.0.0.1[500] used as isakmp port (fd=12) Jan 25 15:01:35 blackhole racoon: NOTIFY: no in-bound policy found: 10.100.101.0/24[0] 10.100.102.0/24[0] proto=any dir=in Jan 25 15:01:35 blackhole racoon: INFO: IPsec-SA request for 10.0.0.1 queued due to no phase1 found. Jan 25 15:01:35 blackhole racoon: INFO: initiate new phase 1 negotiation: 10.0.0.2[500]<=>10.0.0.1[500] Jan 25 15:01:35 blackhole racoon: INFO: begin Identity Protection mode. Jan 25 15:01:35 blackhole racoon: INFO: ISAKMP-SA established 10.0.0.2[500]-10.0.0.1[500] spi:40141d1c6f062bfd:02a7cef151327059 Jan 25 15:01:36 blackhole racoon: INFO: initiate new phase 2 negotiation: 10.0.0.2[0]<=>10.0.0.1[0] Jan 25 15:01:36 blackhole racoon: WARNING: ignore RESPONDER-LIFETIME notification. Jan 25 15:01:36 blackhole racoon: WARNING: attribute has been modified. Jan 25 15:01:36 blackhole racoon: INFO: IPsec-SA established: ESP/Tunnel 10.0.0.1->10.0.0.2 spi=13325301(0xcb53f5) Jan 25 15:01:36 blackhole racoon: INFO: IPsec-SA established: ESP/Tunnel 10.0.0.2->10.0.0.1 spi=1185889426(0x46af3c92) Jan 25 15:01:57 blackhole racoon: INFO: unsupported PF_KEY message REGISTER Jan 25 15:01:57 blackhole racoon: INFO: initiate new phase 2 negotiation: 10.0.0.2[0]<=>10.0.0.1[0] Jan 25 15:01:57 blackhole racoon: WARNING: ignore RESPONDER-LIFETIME notification. Jan 25 15:01:57 blackhole racoon: WARNING: attribute has been modified. Jan 25 15:01:57 blackhole racoon: INFO: IPsec-SA established: ESP/Tunnel 10.0.0.1->10.0.0.2 spi=244848863(0xe9818df) Jan 25 15:01:57 blackhole racoon: INFO: IPsec-SA established: ESP/Tunnel 10.0.0.2->10.0.0.1 spi=2835966601(0xa9096a89) увидел NOTIFY добавил sainfo address 10.100.101.0/24 any address 10.100.102.0/24 any { pfs_group 1; encryption_algorithm 3des; authentication_algorithm non_auth; compression_algorithm deflate ; } вот снова Jan 25 15:25:03 blackhole racoon: INFO: @(#)ipsec-tools 0.3.3 (http://ipsec-tools.sourceforge.net) Jan 25 15:25:03 blackhole racoon: INFO: @(#)This product linked OpenSSL 0.9.7a Feb 19 2003 (http://www.openssl.org/) Jan 25 15:25:03 blackhole racoon: INFO: 10.100.102.1[500] used as isakmp port (fd=8) Jan 25 15:25:03 blackhole racoon: INFO: 10.20.20.101[500] used as isakmp port (fd=9) Jan 25 15:25:03 blackhole racoon: INFO: 10.0.0.2[500] used as isakmp port (fd=10) Jan 25 15:25:03 blackhole racoon: INFO: 212.26.128.69[500] used as isakmp port (fd=11) Jan 25 15:25:03 blackhole racoon: INFO: 127.0.0.1[500] used as isakmp port (fd=12) Jan 25 15:25:03 blackhole racoon: INFO: IPsec-SA request for 10.0.0.1 queued due to no phase1 found. Jan 25 15:25:03 blackhole racoon: INFO: initiate new phase 1 negotiation: 10.0.0.2[500]<=>10.0.0.1[500] Jan 25 15:25:03 blackhole racoon: INFO: begin Identity Protection mode. Jan 25 15:25:04 blackhole racoon: INFO: ISAKMP-SA established 10.0.0.2[500]-10.0.0.1[500] spi:0815d29b41247b36:02a7cef1fa121147 Jan 25 15:25:05 blackhole racoon: INFO: initiate new phase 2 negotiation: 10.0.0.2[0]<=>10.0.0.1[0] Jan 25 15:25:05 blackhole racoon: WARNING: ignore RESPONDER-LIFETIME notification. Jan 25 15:25:05 blackhole racoon: WARNING: attribute has been modified. Jan 25 15:25:05 blackhole racoon: INFO: IPsec-SA established: ESP/Tunnel 10.0.0.1->10.0.0.2 spi=48901382(0x2ea2d06) Jan 25 15:25:05 blackhole racoon: INFO: IPsec-SA established: ESP/Tunnel 10.0.0.2->10.0.0.1 spi=2643096214(0x9d8a7296) но результат абсолютно тот же -- Best regard, Aleksander Trotsai aka MAGE-RIPE aka MAGE-UANIC My PGP key at ftp://blackhole.adamant.ua/pgp/trotsai.key[.asc] Человек с дружественным интерфейсом... =================================================================== uanog mailing list. To Unsubscribe: send mail to majordomo@uanog.kiev.ua with "unsubscribe uanog" in the body of the message