[SOLVED] ipsec woes

bigearsbilly · 02-11-2013, 05:00 AM

I am using ipsec and racoon to try to connect as a client to a cicso VPN.
I think the tunnel is OK:

Code:

2013-02-11 10:50:43: INFO: IPsec-SA established: ESP/Tunnel
2013-02-11 10:54:03: DEBUG: received a valid R-U-THERE, ACK sent

tcpdump shows isakmp traffic both ways:

Code:

10:57:03.454441 IP IDC.isakmp > TMI.isakmp: isakmp: phase 2/others ? inf[E]
10:57:03.456719 IP TMI.isakmp > IDC.isakmp: isakmp: phase 2/others ? inf[E]

when I try to ping or telnet to the server tcpdump on my outbound nic shows
ESP seems to be sent over the wire but nothing appears to come back.
any ideas?

Code:

10:58:35.425940 IP TMI > IDC: ESP(spi=0xe15a43ea,seq=0x41), length 92
10:58:41.425972 IP TMI > IDC: ESP(spi=0xe15a43ea,seq=0x42), length 92

scheidel21 · 02-12-2013, 11:17 AM

Is ICMP echo allowed on the CISCO device acting as the server? Are you able to get to internal resources? Have you checked routing? Do you see the connection on the CISCO device?

bigearsbilly · 02-14-2013, 06:10 AM

I have done it.
It was just a matter of getting my head down and learning it. It was incorrect spd stuff.

If anyone is interested I am working on a script for it.