juniper GT5／cisco 841間のVPN接続を評価しています。 IKE Phase1でエラーが出てしまいます。 GT5側がイニシエーター CISCO側はPhaze1正常にコンプリートしています。 GT5側で以下のエラーが出ています。 みたところ受信している情報に問題はなさそうなのですが？ よろしくお願いします。 ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Phase 1 MM Initiator constructing 5th message. ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Construct ISAKMP header. ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Msg header built (next payload #5) ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Construct [ID] for ISAKMP ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Construct [HASH] ## 2018-01-12 17:35:58 : IKE<49.110.248.241> ID, len=8, type=1, pro=17, port=500, ## 2018-01-12 17:35:58 : IKE<49.110.248.241> addr=49.110.248.243 ## 2018-01-12 17:35:58 : IKE<49.110.248.241 > Xmit*: [ID] [HASH] ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Encrypt P1 payload (len 60) ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Initiator sending IPv4 IP 49.110.248.241/port 500 ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Send Phase 1 packet (len=68) ## 2018-01-12 17:35:58 : IKE<49.110.248.241> IKE msg done: PKI state<0> IKE state<2/80180f> ## 2018-01-12 17:35:58 : IKE<0.0.0.128> Catcher: Error get ike packet from socket. ## 2018-01-12 17:35:58 : IKE<49.110.248.241> ike packet, len 96, action 0 ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Catcher: received 68 bytes from socket. ## 2018-01-12 17:35:58 : IKE<49.110.248.241> ****** Recv packet if <untrust> of vsys <Root> ****** ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Catcher: get 68 bytes. src port 500 ## 2018-01-12 17:35:58 : IKE<0.0.0.0 > ISAKMP msg: len 68, nxp 5[ID], exch 2[MM], flag 01 E ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Decrypting payload (length 40) ## 2018-01-12 17:35:58 : IKE<49.110.248.241 > Recv*: [ID] [HASH] ## 2018-01-12 17:35:58 : IKE<0.0.0.0 > extract payload (40): ## 2018-01-12 17:35:58 : IKE<49.110.248.241> MM in state OAK_MM_KEY_EXCH. ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Process [ID]: ## 2018-01-12 17:35:58 : IKE<49.110.248.241> ID received: type=ID_IPV4_ADDR, ip = 49.110.248.241, port=500, protocol=17 ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Received incorrect ID payload: ID type mismatch. ## 2018-01-12 17:35:58 : IKE<49.110.248.241> ID processed. return 1. sa->p1_state = 2. ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Error processing ID ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Phase 1: Main mode negotiations have failed. ## 2018-01-12 17:35:58 : IKE<49.110.248.241> IKE msg done: PKI state<0> IKE state<2/80180f> ## 2018-01-12 17:35:58 : IKE<49.110.248.241> Catcher: Error get ike packet from socket.
↧