PFsense IPSec VPN failing phase 2

11,972

I finally sorted it. The client remote and local networks were set to 192.168.0.1 and 192.168.10.1, which is wrong.

It should have been the networks (0.0 and 10.0).

The client is using a Draytek Vigor 3200 Router for reference.

Share:
11,972

Related videos on Youtube

imperium2335
Author by

imperium2335

PHP, JS, MySQL coder and retired 3D modeler.

Updated on September 18, 2022

Comments

  • imperium2335
    imperium2335 almost 2 years

    I am very new to VPNs and I am getting errors. I have posted the following lines that I think are the most relevant:

    Dec 2 08:41:03  racoon: DEBUG: IV freed
    Dec 2 08:41:03  racoon: [EUA]: [79.121.213.141] ERROR: failed to pre-process ph2 packet [Check Phase 2 settings, networks] (side: 1, status: 1).
    Dec 2 08:41:03  racoon: ERROR: failed to get sainfo.
    Dec 2 08:41:03  racoon: ERROR: failed to get sainfo.
    Dec 2 08:41:03  racoon: DEBUG: cmpid source: '192.168.10.0/24'
    Dec 2 08:41:03  racoon: DEBUG: cmpid target: '79.121.213.141/32'
    Dec 2 08:41:03  racoon: DEBUG: check and compare ids : value mismatch (IPv4_subnet)
    Dec 2 08:41:03  racoon: DEBUG: cmpid source: '192.168.0.0/24'
    Dec 2 08:41:03  racoon: DEBUG: cmpid target: '192.168.0.0/24'
    Dec 2 08:41:03  racoon: DEBUG: check and compare ids : values matched (IPv4_subnet)
    Dec 2 08:41:03  racoon: DEBUG: evaluating sainfo: loc='192.168.0.0/24', rmt='192.168.10.0/24', peer='ANY', id=1
    Dec 2 08:41:03  racoon: DEBUG: getsainfo params: loc='192.168.0.0/24' rmt='79.121.213.141/32' peer='79.121.213.141' client='79.121.213.141' id=1
    Dec 2 08:41:03  racoon: DEBUG: 304ccaa9 0176e9fb 71aa4c00 c864b944 24677b49
    Dec 2 08:41:03  racoon: DEBUG: HASH computed:
    Dec 2 08:41:03  racoon: DEBUG: hmac(hmac_sha1)
    

    Can anyone tell me where this is going wrong? I don't think cmpid source and cmpid target should be the same?