[Résolu] -pb vpn avec FVX538v2 Options

[bennnnn]

bonjour,

j'ai un FVX538v2 sur 2 sites avec un tunnel vpn, mais le tunnel fonctionne 1 jour sur 2 , voire moins
=> firmware à jour
j'avais un routeur adsl assez vieux, je l'ai changé, mais ca change rien

voici le logs

2011 Dec 13 09:48:08 [FVX538] [IKE] IKE started_
2011 Dec 13 09:48:08 [FVX538] [IKE] Adding IKE configuration with identifer "aaaa"_
2011 Dec 13 09:48:08 [FVX538] [IKE] Adding IPSec configuration with identifier "aaaa"_
2011 Dec 13 09:48:09 [FVX538] [IKE] accept a request to establish IKE-SA: xx.xx.xxx.xx_
2011 Dec 13 09:48:11 [FVX538] [IKE] Using IPsec SA configuration: 192.168.1.0/24<->192.168.2.1/24_
2011 Dec 13 09:48:11 [FVX538] [IKE] Configuration found for xx.xx.xxxx.xx._
2011 Dec 13 09:48:11 [FVX538] [IKE] Initiating new phase 1 negotiation: 192.168.1.225[500]<=>xx.xx.xxx.xx[500]_
2011 Dec 13 09:48:11 [FVX538] [IKE] Beginning Identity Protection mode._
2011 Dec 13 09:48:11 [FVX538] [IKE] Setting DPD Vendor ID_
2011 Dec 13 09:48:11 [FVX538] [IKE] Received Vendor ID: RFC XXXX_
2011 Dec 13 09:48:11 [FVX538] [IKE] Received Vendor ID: DPD_
2011 Dec 13 09:48:11 [FVX538] [IKE] DPD is Enabled_
2011 Dec 13 09:48:11 [FVX538] [IKE] Received Vendor ID: KAME/racoon_
2011 Dec 13 09:48:11 [FVX538] [IKE] For xx.xx.xxx.xx[500], Selected NAT-T version: RFC XXXX_
2011 Dec 13 09:48:11 [FVX538] [IKE] Received Vendor ID: KAME/racoon_
2011 Dec 13 09:48:11 [FVX538] [IKE] NAT-D payload does not match for 192.168.1.225[500]_
2011 Dec 13 09:48:11 [FVX538] [IKE] NAT-D payload does not match for xx.xx.xxx.xx[500]_
2011 Dec 13 09:48:11 [FVX538] [IKE] NAT detected: ME PEER_
2011 Dec 13 09:48:11 [FVX538] [IKE] for debugging :: changing ports
2011 Dec 13 09:48:11 [FVX538] [IKE] port changed !!_
2011 Dec 13 09:48:21 [FVX538] [IKE] The packet is retransmitted by xx.xx.xxx.xx[500]._
- Last output repeated 2 times -
2011 Dec 13 09:48:42 [FVX538] [IKE] Phase 2 negotiation failed due to time up waiting for phase1. ESP xx.xx.xxx.xx->192.168.1.225 _
2011 Dec 13 09:48:43 [FVX538] [IKE] Using IPsec SA configuration: 192.168.1.0/24<->192.168.2.1/24_
2011 Dec 13 09:48:43 [FVX538] [IKE] Configuration found for xx.xx.xxxx.xx._
2011 Dec 13 09:48:51 [FVX538] [IKE] The packet is retransmitted by xx.xx.xxx.xx[500]._
2011 Dec 13 09:48:54 [FVX538] [IKE] Configuration found for xx.xx.xxx.xx._
2011 Dec 13 09:49:01 [FVX538] [IKE] The packet is retransmitted by xx.xx.xxx.xx[500]._
2011 Dec 13 09:49:11 [FVX538] [IKE] Phase 1 negotiation failed due to time up for xx.xx.xxx.xx[4500]. ea1b11538764148e:f07f6d9910e73c55_
2011 Dec 13 09:49:14 [FVX538] [IKE] Phase 2 negotiation failed due to time up waiting for phase1. ESP xx.xx.xxx.xx->192.168.1.225 _
2011 Dec 13 09:49:25 [FVX538] [IKE] Invalid SA protocol type: 0_

merci pour votre aide

Ce message a été modifié par bennnnn - mardi 13 décembre 2011 à 10:59.

[bennnnn]

probleme reglé , ca venait de la ligne internet qui avait un defaut, apres l'intervention de orange, ca refonctionne

[princemalko]

Si vous avez besoin d'informations supplémentaires, n'hésitez pas à ouvrir un nouveau sujet ou à demander la réouverture de votre sujet par MP à un modérateur ou administrateur

Merci.

Ceci est un message automatique.