I'm still struggling to keep my ipsec vpns running smoothly. Is there a reference to a more detailed description of the allowed isakmp exchanges? Watching tcpdump for some time gives me a rough impression of what is going on, but it is hard to tell what's wrong ( if anything at all ) when the exchanges proceed other than they normally do.
For example I see that 'normally' my isakmpd enters into phase-2 exchange immediately after phase-1 is established. But sometimes it delays to initiate phase-2 for up to 10 minutes ater phase-1 completes, and it often fails in these case ( no response from remote ). Any hints to books or online material are welcome. Thanks and regards Christoph
