Hi,
I've just try to create a tunnel as Monowall <--> Cisco Asa. I've got some issue.
I read this how-to and I try to recreate on ASA:
http://doc.m0n0.ch/handbook/examplevpn.htmlInto log we can see:
Jun 16 21:50:42 last message repeated 69 times
Jun 16 21:40:39 last message repeated 14 times
Jun 16 21:38:38 last message repeated 4 times
Jun 16 21:38:03 racoon: ERROR: couldn't find configuration.
Jun 16 21:38:01 racoon: ERROR: phase1 negotiation failed due to time up. 319f4685648a54e6:0000000000000000
Jun 16 21:37:52 racoon: INFO: delete phase 2 handler.
Jun 16 21:37:52 racoon: ERROR: phase2 negotiation failed due to time up waiting for phase1. ESP <remote ASA>[500]-><local Monowall>[500]
Jun 16 21:37:52 last message repeated 2 times
Jun 16 21:37:36 racoon: ERROR: couldn't find configuration.
Jun 16 21:37:30 racoon: INFO: delete phase 2 handler.
Jun 16 21:37:30 racoon: ERROR: phase2 negotiation failed due to time up waiting for phase1. ESP <remote ASA>[500]-><local Monowall>[500]
Jun 16 21:37:28 racoon: ERROR: couldn't find configuration.
Jun 16 21:37:22 racoon: INFO: phase2 sa deleted <local Monowall>-<remote ASA>
Jun 16 21:37:21 racoon: INFO: request for establishing IPsec-SA was queued due to no phase1 found.
Jun 16 21:37:21 racoon: INFO: phase2 sa expired <local Monowall>-<remote ASA>
Jun 16 21:37:20 racoon: INFO: delete phase 2 handler.
Jun 16 21:37:20 racoon: ERROR: phase2 negotiation failed due to time up waiting for phase1. ESP <remote ASA>[500]-><local Monowall>[500]
Jun 16 21:37:17 racoon: ERROR: couldn't find configuration.
Jun 16 21:37:11 racoon: INFO: begin Aggressive mode.
Jun 16 21:37:11 racoon: INFO: initiate new phase 1 negotiation: <local Monowall>[500]<=><remote ASA>[500]
Jun 16 21:37:11 racoon: INFO: IPsec-SA request for <remote ASA> queued due to no phase1 found.
Jun 16 21:37:09 racoon: ERROR: couldn't find configuration.
Jun 16 21:37:08 racoon: INFO: delete phase 2 handler.
Jun 16 21:37:08 racoon: ERROR: phase2 negotiation failed due to time up waiting for phase1. ESP <remote ASA>[500]-><local Monowall>[500]
Jun 16 21:37:05 racoon: ERROR: phase1 negotiation failed due to time up. 67113dcdd5896f15:0000000000000000
Jun 16 21:37:01 racoon: ERROR: couldn't find configuration.
Jun 16 21:36:59 racoon: INFO: request for establishing IPsec-SA was queued due to no phase1 found.
Jun 16 21:36:58 racoon: INFO: delete phase 2 handler.
Jun 16 21:36:58 racoon: ERROR: phase2 negotiation failed due to time up waiting for phase1. ESP <remote ASA>[500]-><local Monowall>[500]
Jun 16 21:36:53 racoon: ERROR: couldn't find configuration.
Jun 16 21:36:49 racoon: INFO: request for establishing IPsec-SA was queued due to no phase1 found.
Jun 16 21:36:42 racoon: ERROR: couldn't find configuration.
Jun 16 21:36:37 racoon: INFO: request for establishing IPsec-SA was queued due to no phase1 found.
Jun 16 21:36:36 racoon: INFO: delete phase 2 handler.
Jun 16 21:36:36 racoon: ERROR: phase2 negotiation failed due to time up waiting for phase1. ESP <remote ASA>[500]-><local Monowall>[500]
Jun 16 21:36:34 racoon: ERROR: couldn't find configuration.
Jun 16 21:36:28 racoon: INFO: phase2 sa deleted <local Monowall>-<remote ASA>
Jun 16 21:36:27 racoon: INFO: request for establishing IPsec-SA was queued due to no phase1 found.
Jun 16 21:36:27 racoon: INFO: phase2 sa expired <local Monowall>-<remote ASA>
Jun 16 21:36:26 racoon: ERROR: couldn't find configuration.
Jun 16 21:36:24 racoon: INFO: delete phase 2 handler.
Have you got any suggest?
Regards.
Topic: Monowall & Cisco ASA