Quantcast
Channel: Azure Networking (DNS, Traffic Manager, VPN, VNET) forum
Viewing all articles
Browse latest Browse all 6513

IPSec Site to Site settings

$
0
0

Hi, I'm trying to set up a site 2 site tunnel with a router not on on the very small list of approved and expensive ones. I was inspired when I read an article where some one had connected with a NEGEAR VPN device. The router I am using is a Billion 7800DX.

If anyone could spot what I am doing wrong that would be a HUGE help.

I'm following the azure settings published on this page 

http://www.windowsazure.com/en-us/manage/services/networking/create-a-virtual-network/

and IPSec ones on this page

http://msdn.microsoft.com/en-us/library/windowsazure/jj156075.aspx

The devices are talking to each other, but clearly not the same language as they aren't connecting.

My settings on my router are 


The log at the office end are

Sep 12 07:54:04 authpriv debug pluto[16096]: | found connection: AzureSg 
Sep 12 07:54:04 authpriv warn pluto[16096]: "AzureSg" #263: transition from state STATE_IKEv2_START to state STATE_PARENT_R1
Sep 12 07:54:04 authpriv warn pluto[16096]: "AzureSg" #263: STATE_PARENT_R1: received v2I1, sent v2R1 {auth=IKEv2 cipher=aes_256 integ=sha1_96 prf=oakley_sha group=modp1024}
Sep 12 07:54:05 authpriv warn pluto[16096]: "AzureSg" #263: IKEv2 mode peer ID is ID_IPV4_ADDR: '<removed>'
Sep 12 07:54:05 authpriv debug pluto[16096]: | CHILD SA proposals received
Sep 12 07:54:05 authpriv warn pluto[16096]: "AzureSg" #263: PAUL: this is where we have to check the TSi/TSr
Sep 12 07:54:05 authpriv warn pluto[16096]: "AzureSg" #263: transition from state STATE_PARENT_R1 to state STATE_PARENT_R2
Sep 12 07:54:05 authpriv warn pluto[16096]: "AzureSg" #263: STATE_PARENT_R2: received v2I2, PARENT SA established
Sep 12 07:54:06 authpriv debug pluto[16096]: | found connection: AzureSg 
Sep 12 07:54:06 authpriv warn pluto[16096]: "AzureSg" #264: transition from state STATE_IKEv2_START to state STATE_PARENT_R1
Sep 12 07:54:06 authpriv warn pluto[16096]: "AzureSg" #264: STATE_PARENT_R1: received v2I1, sent v2R1 {auth=IKEv2 cipher=aes_256 integ=sha1_96 prf=oakley_sha group=modp1024}
Sep 12 07:54:06 authpriv warn pluto[16096]: "AzureSg" #264: IKEv2 mode peer ID is ID_IPV4_ADDR: '<removed>'
Sep 12 07:54:06 authpriv debug pluto[16096]: | CHILD SA proposals received
Sep 12 07:54:06 authpriv warn pluto[16096]: "AzureSg" #264: PAUL: this is where we have to check the TSi/TSr
Sep 12 07:54:06 authpriv warn pluto[16096]: "AzureSg" #264: transition from state STATE_PARENT_R1 to state STATE_PARENT_R2
Sep 12 07:54:06 authpriv warn pluto[16096]: "AzureSg" #264: STATE_PARENT_R2: received v2I2, PARENT SA established
Sep 12 07:54:07 authpriv debug pluto[16096]: | found connection: AzureSg 
Sep 12 07:54:07 authpriv warn pluto[16096]: "AzureSg" #265: transition from state STATE_IKEv2_START to state STATE_PARENT_R1
Sep 12 07:54:07 authpriv warn pluto[16096]: "AzureSg" #265: STATE_PARENT_R1: received v2I1, sent v2R1 {auth=IKEv2 cipher=aes_256 integ=sha1_96 prf=oakley_sha group=modp1024}
Sep 12 07:54:07 authpriv warn pluto[16096]: "AzureSg" #265: IKEv2 mode peer ID is ID_IPV4_ADDR: '<removed>'
Sep 12 07:54:07 authpriv debug pluto[16096]: | CHILD SA proposals received
Sep 12 07:54:07 authpriv warn pluto[16096]: "AzureSg" #265: PAUL: this is where we have to check the TSi/TSr
Sep 12 07:54:07 authpriv warn pluto[16096]: "AzureSg" #265: transition from state STATE_PARENT_R1 to state STATE_PARENT_R2
Sep 12 07:54:07 authpriv warn pluto[16096]: "AzureSg" #265: STATE_PARENT_R2: received v2I2, PARENT SA established
Sep 12 07:54:19 authpriv warn pluto[16096]: "AzureSg" #262: ignoring informational payload, type NO_PROPOSAL_CHOSEN msgid=00000000
Sep 12 07:54:19 authpriv warn pluto[16096]: "AzureSg" #262: received and ignored informational message
Sep 12 07:54:59 authpriv warn pluto[16096]: "AzureSg" #262: ignoring informational payload, type NO_PROPOSAL_CHOSEN msgid=00000000
Sep 12 07:54:59 authpriv warn pluto[16096]: "AzureSg" #262: received and ignored informational message
Sep 12 07:55:39 authpriv warn pluto[16096]: "AzureSg" #262: ignoring informational payload, type NO_PROPOSAL_CHOSEN msgid=00000000
Sep 12 07:55:39 authpriv warn pluto[16096]: "AzureSg" #262: received and ignored informational message
Sep 12 07:56:19 authpriv warn pluto[16096]: "AzureSg" #262: max number of retransmissions (5) reached STATE_MAIN_I1.  No response (or no acceptable response) to our first IKE message
Sep 12 07:56:19 authpriv warn pluto[16096]: "AzureSg" #266: initiating Main Mode to replace #262
Sep 12 07:56:20 authpriv warn pluto[16096]: "AzureSg" #266: ignoring informational payload, type NO_PROPOSAL_CHOSEN msgid=00000000
Sep 12 07:56:20 authpriv warn pluto[16096]: "AzureSg" #266: received and ignored informational message


And the settings at Azure


Viewing all articles
Browse latest Browse all 6513

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>