IPSec transport mode and traceroute

2008-02-06 Thread Jason Mader
I've got really simple transport mode IPSec setup between two hosts: [ipsec.conf] ike ah transport from 128.164.144.144 to 128.164.159.159 main auth hmac-sha2-256 group modp1536 quick group modp1536 Though traceroute from one host to the other fails at the gateway, despite the gateway responding,

Re: isakmpd: message_recv: invalid cookie(s)

2007-07-05 Thread Jason Mader
On 6/26/07, Jason Mader <[EMAIL PROTECTED]> wrote: On two OpenBSD 4.1-stable systems, I get: isakmpd[31988]: message_recv: invalid cookie(s) 378fd1c537d22b16 38bf2f6699147070 isakmpd[31988]: dropped message from 128.164.144.144 port 500 due to notification type INVALID_COOKIE isak

isakmpd: message_recv: invalid cookie(s)

2007-06-26 Thread Jason Mader
On two OpenBSD 4.1-stable systems, I get: isakmpd[31988]: message_recv: invalid cookie(s) 378fd1c537d22b16 38bf2f6699147070 isakmpd[31988]: dropped message from 128.164.144.144 port 500 due to notification type INVALID_COOKIE isakmpd is running with the -K option, and ipsec.conf is very simple,