OVH Cloud OVH Cloud

construction VPN

1 réponse
Avatar
dub_ced
Bonjour,

cela fait 1 semaine que je me prend la t=EAte sur mon VPN qui consiste
=E0 relier 2 sites en VPN par l'interm=E9diaire de 2 routeurs Linksys
WRV200. De chaque cot=E9 je poss=E8de un modem ADSL D-Link (en Bridge),
une adresse IP fixe et donc le routeur. J'ai un r=E9seau configur=E9 en
192.168.1.x/255.255.255.0 et l'autre en 192.168.2.x./255.255.255.0
Mon ping fonctionne sur la passerelle distante mais impossible de
cr=E9er le tunnel VPN (le statut est Try to connect to Remote Gateway).
Je vous mets les logs d'un de mes routeurs:
380 [MON 12:25:33] "TunnelA" #22: [WRV200 Response:] Please check
your Local Secure Group, Remote Secure Group, and PFS setting of this
tunnel
381 [MON 12:25:33] "TunnelA" #22: sending encrypted notification
INVALID_ID_INFORMATION to 193.x.x.x:500
382 [MON 12:25:43] "TunnelA" #22: Quick Mode I1 message is
unacceptable because it uses a previously used Message ID 0x89337c5a
(perhaps this is a duplicated packet)
383 [MON 12:25:43] "TunnelA" #22: sending encrypted notification
INVALID_MESSAGE_ID to 193.x.x.x:500
384 [MON 12:26:03] "TunnelA" #22: Quick Mode I1 message is
unacceptable because it uses a previously used Message ID 0x89337c5a
(perhaps this is a duplicated packet)
385 [MON 12:26:03] "TunnelA" #22: sending encrypted notification
INVALID_MESSAGE_ID to 193.x.x.x:500
386 [MON 12:26:43] "TunnelA" #22: [WRV200 Response:] Cannot respond
to IPsec SA request
387 [MON 12:26:43] "TunnelA" #22: [WRV200 Response:] No connection
is known for 192.168.1.0/32=3D=3D=3D217.x.x.x...193.x.x.x=3D=3D=3D192.168.2=
.0/32
388 [MON 12:26:43] "TunnelA" #22: [WRV200 Response:] Can't establish
IPSec SA. This might be the asymmetric Secure Group setting.
389 [MON 12:26:43] "TunnelA" #22: [WRV200 Response:] Please check
your Local Secure Group, Remote Secure Group, and PFS setting of this
tunnel
390 [MON 12:26:43] "TunnelA" #22: sending encrypted notification
INVALID_ID_INFORMATION to 193.x.x.x:500
391 [MON 12:26:52] "TunnelA" #22: Quick Mode I1 message is
unacceptable because it uses a previously used Message ID 0x8ad2738d
(perhaps this is a duplicated packet)
392 [MON 12:26:52] "TunnelA" #22: sending encrypted notification
INVALID_MESSAGE_ID to 193.x.x.x:500
393 [MON 12:27:13] "TunnelA" #22: Quick Mode I1 message is
unacceptable because it uses a previously used Message ID 0x8ad2738d
(perhaps this is a duplicated packet)
394 [MON 12:27:13] "TunnelA" #22: sending encrypted notification
INVALID_MESSAGE_ID to 193.x.x.x:500

Le NAT-Traversal et Global NAT-Traversal sont d=E9sactiv=E9s. Le PFS est
activ=E9. Je passe par Encryption: 3DES et
Key Exchange Method:Auto (que ce choix)
Authentication: MD5 (Phase 1 et 2).
ISAKMP Key Lifetime(s):28800
Operation Mode: Main
IPSec Key Lifetime(s):3600
DH Group: Group 2-1024-bits

Est ce que quelqu'un est en mesure de m'aider car je vois pas trop!!!

Merci d'avance

Bonne journ=E9e =E0 tous

1 réponse

Avatar
Hicham
Désolé mais il me semble que ton post n'a pas sa place dans frta. Je
t'invite quand même à jeter un coup d'oeil sur cette page
http://www.frameip.com/vpn/
Bonne chance