Error en VPN.

[chris_hdez]

Hola,

Estoy intentando levantar una VPN IPSEC entre un Fortigate 60C y un Vigor 2120. He repasado mil veces la configuración en ambas partes, seguido la documentación y no hay manera que funcione.

El 60C está en modo NAT, tiene un interfaz interno (192.168.22.2 es la ip del forti en este interfaz). El tunel lo he probado en Main mode y en modo agresivo, no hay forma de levantarlo.

Alguien puede intuir algo con este debug? Gracias por la ayuda.

Aclaración "ip-publica-vigor2120" es la ip pública del lado del Vigor 2120

=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2015.05.19 12:33:58 =~=~=~=~=~=~=~=~=~=~=~=
login as: admin
FGT60Cxxxxxxxxxxx # diagnose debug disable
FGT60Cxxxxxxxxxxx # diagnose vpn ike log-filter clear
FGT60Cxxxxxxxxxxx # diagnose vpn ike log-filter dst-addr4 ip-publica-vigor2120
FGT60Cxxxxxxxxxxx # diagnose debug app ike 255
FGT60Cxxxxxxxxxxx # diagnose debug enable


FGT60Cxxxxxxxxxxx # ike 0:LISBOA2: link is idle 4 192.168.22.2->ip-publica-vigor2120:4500 dpd=1 seqno=8
ike 0:LISBOA2:2389: send IKEv1 DPD probe, seqno 8
ike 0:LISBOA2:2389: enc 37EC85607DDF94B1F9855892684CF1940810050148EC5F4A000000540B00001818360C28CCAA22ED53FC0CC0A69FD63FF409FD90000000200000000101108D2837EC85607DDF94B1F9855892684CF19400000008
ike 0:LISBOA2:2389: out 37EC85607DDF94B1F9855892684CF1940810050148EC5F4A0000005C690D661C1446574A31CC37763CF09565B4DF1BE0F5FF0D8C77C877C50B4C1CBA97FAEC101960CF77572209A0A2CD6AD6EEC73EF984CA76AA457749D8D651C5B7
ike 0:LISBOA2:2389: sent IKE msg (R-U-THERE): 192.168.22.2:4500->ip-publica-vigor2120:4500, len=92, id=37ec85607ddf94b1/f9855892684cf194:48ec5f4a
ike shrank heap by 122880 bytes
ike 0:LISBOA2: NAT keep-alive 4 192.168.22.2->ip-publica-vigor2120:4500.
ike 0:LISBOA2:2389: out FF
ike 0:LISBOA2:2389: sent IKE msg (keepalive): 192.168.22.2:4500->ip-publica-vigor2120:4500, len=1, id=ff00000000000000/0000000039000000:05000000
ike 0:LISBOA2: link is idle 4 192.168.22.2->ip-publica-vigor2120:4500 dpd=1 seqno=8
ike 0:LISBOA2:2389: send IKEv1 DPD probe, seqno 8
ike 0:LISBOA2:2389: enc 37EC85607DDF94B1F9855892684CF19408100501302C063C000000540B000018109F549A8D9567D39A5FE711340B4567750E5A3A000000200000000101108D2837EC85607DDF94B1F9855892684CF19400000008
ike 0:LISBOA2:2389: out 37EC85607DDF94B1F9855892684CF19408100501302C063C0000005C7AC26A92BA0984D5D92BE70FCBE9C779CCD4A15E76424B574664289BEC980838CD6069902DFD3AF4DBF4BACCF0ED72E9E91DA7EA32094B1FB12AED3D8ED0B880
ike 0:LISBOA2:2389: sent IKE msg (R-U-THERE): 192.168.22.2:4500->ip-publica-vigor2120:4500, len=92, id=37ec85607ddf94b1/f9855892684cf194:302c063c
ike 0:LISBOA2: link is idle 4 192.168.22.2->ip-publica-vigor2120:4500 dpd=1 seqno=8
ike 0:LISBOA2:2389: send IKEv1 DPD probe, seqno 8
ike 0:LISBOA2:2389: enc 37EC85607DDF94B1F9855892684CF19408100501532BB8D7000000540B000018BC242C8C9C65917FD7B118427948BF07362CFE30000000200000000101108D2837EC85607DDF94B1F9855892684CF19400000008
ike 0:LISBOA2:2389: out 37EC85607DDF94B1F9855892684CF19408100501532BB8D70000005CCA6890C1698E5456A23EC67CEBB7020B40927644DB1D255D5901DB5DB2C16E6D5CB198375ACF206EA38B7C1E80C4ED7E242A548054E0A6A8272A5B50B9B2AEF1
ike 0:LISBOA2:2389: sent IKE msg (R-U-THERE): 192.168.22.2:4500->ip-publica-vigor2120:4500, len=92, id=37ec85607ddf94b1/f9855892684cf194:532bb8d7
ike 0:LISBOA2: NAT keep-alive 4 192.168.22.2->ip-publica-vigor2120:4500.
ike 0:LISBOA2:2389: out FF
ike 0:LISBOA2:2389: sent IKE msg (keepalive): 192.168.22.2:4500->ip-publica-vigor2120:4500, len=1, id=ff00000000000000/0000000011000000:e0a01702
ike 0:LISBOA2: link fail 4 192.168.22.2->ip-publica-vigor2120:4500 dpd=1
ike 0:LISBOA2: link down 4 192.168.22.2->ip-publica-vigor2120:4500
ike 0:LISBOA2: deleting
ike 0:LISBOA2: flushing
ike 0:LISBOA2: flushed
ike 0:LISBOA2:2389: send ISAKMP delete 37ec85607ddf94b1/f9855892684cf194
ike 0:LISBOA2:2389: enc 37EC85607DDF94B1F9855892684CF19408100501E69B4B4B000000500C0000183888C30FAA77E42E1E28D59F08556D21EF690B780000001C000000010110000137EC85607DDF94B1F9855892684CF194
ike 0:LISBOA2:2389: out 37EC85607DDF94B1F9855892684CF19408100501E69B4B4B0000005411B8B27AF4FE274FB3C0E2AEBFB8E165BC25E4E989A0EB432A2FF06FDAD005E1FDA98B17ACC49A42461116D190326C98DC3DE9147F85E24E
ike 0:LISBOA2:2389: sent IKE msg (ISAKMP SA DELETE-NOTIFY): 192.168.22.2:4500->ip-publica-vigor2120:4500, len=84, id=37ec85607ddf94b1/f9855892684cf194:e69b4b4b
ike 0:LISBOA2: reset NAT-T
ike 0:LISBOA2: deleted
ike 0:LISBOA2: set oper down
ike 0:LISBOA2: schedule auto-negotiate
ike 0:LISBOA2:2390: initiator: main mode is sending 1st message...
ike 0:LISBOA2:2390: cookie 4431bf4a2e7ed778/0000000000000000
ike 0:LISBOA2:2390: out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
ike 0:LISBOA2:2390: sent IKE msg (ident_i1send): 192.168.22.2:500->ip-publica-vigor2120:500, len=292, id=4431bf4a2e7ed778/0000000000000000
ike 0: comes ip-publica-vigor2120:500->192.168.22.2:500,ifindex=4....
ike 0: IKEv1 exchange=Identity Protection id=4431bf4a2e7ed778/4d640b7e363b4c9c len=120
ike 0: in 4431BF4A2E7ED7784D640B7E363B4C9C0110020000000000000000780D000034000000010000000100000028010100010000002001010000800B0001800C7080800100058003000180020002800400050D000014AFCAD71368A1F1C96B8696FC77570100000000144A131C81070358455C5728F20E95452F
ike 0:LISBOA2:2390: initiator: main mode get 1st response...
ike 0:LISBOA2:2390: VID DPD AFCAD71368A1F1C96B8696FC77570100
ike 0:LISBOA2:2390: DPD negotiated
ike 0:LISBOA2:2390: VID RFC 3947 4A131C81070358455C5728F20E95452F
ike 0:LISBOA2:2390: selected NAT-T version: RFC 3947
ike 0:LISBOA2:2390: negotiation result
ike 0:LISBOA2:2390: proposal id = 1:
ike 0:LISBOA2:2390: protocol id = ISAKMP:
ike 0:LISBOA2:2390: trans_id = KEY_IKE.
ike 0:LISBOA2:2390: encapsulation = IKE/none
ike 0:LISBOA2:2390: type=OAKLEY_ENCRYPT_ALG, val=3DES_CBC.
ike 0:LISBOA2:2390: type=OAKLEY_HASH_ALG, val=SHA.
ike 0:LISBOA2:2390: type=AUTH_METHOD, val=PRESHARED_KEY.
ike 0:LISBOA2:2390: type=OAKLEY_GROUP, val=1536.
ike 0:LISBOA2:2390: ISAKMP SA lifetime=28800
ike 0:LISBOA2:2390: out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
ike 0:LISBOA2:2390: sent IKE msg (ident_i2send): 192.168.22.2:500->ip-publica-vigor2120:500, len=292, id=4431bf4a2e7ed778/4d640b7e363b4c9c
ike 0: comes ip-publica-vigor2120:500->192.168.22.2:500,ifindex=4....
ike 0: IKEv1 exchange=Identity Protection id=4431bf4a2e7ed778/4d640b7e363b4c9c len=292
ike 0: in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
ike 0:LISBOA2:2390: initiator: main mode get 2nd response...
ike 0:LISBOA2:2390: NAT detected: ME
ike 0:LISBOA2:2390: NAT-T float port 4500
ike 0:LISBOA2:2390: ISAKMP SA 4431bf4a2e7ed778/4d640b7e363b4c9c key 24:E345302E94A93433B3576A61F097681E3670290F4E4BD2D4
ike 0:LISBOA2:2390: add INITIAL-CONTACT
ike 0:LISBOA2:2390: enc 4431BF4A2E7ED7784D640B7E363B4C9C05100201000000000000005C0800000C01000000C0A816020B000018AE408E1A2B200127A7131710E6C61E1B199301C50000001C00000001011060024431BF4A2E7ED7784D640B7E363B4C9C
ike 0:LISBOA2:2390: out 4431BF4A2E7ED7784D640B7E363B4C9C051002010000000000000064A1981FFE553412306047C0205BF2FF94C3B82F6CCFA333BDBEE9DB190CDCAA784DA3F5032D36C82F13CDB2FF9D0FE01357768A156343B7F92305812B9988EDEF79C9CC888160183C
ike 0:LISBOA2:2390: sent IKE msg (ident_i3send): 192.168.22.2:4500->ip-publica-vigor2120:4500, len=100, id=4431bf4a2e7ed778/4d640b7e363b4c9c
ike 0: comes ip-publica-vigor2120:4500->192.168.22.2:4500,ifindex=4....
ike 0: IKEv1 exchange=Identity Protection id=4431bf4a2e7ed778/4d640b7e363b4c9c len=92
ike 0: in 4431BF4A2E7ED7784D640B7E363B4C9C05100201000000000000005CB046D77434E1033AF1DA30DF347D7574A19BC8ADC4A0ACFDC151D7354C3E5C051A0C00D9DB182F7B4340C7BE9B084EDB0F20ECD66D02C5E3AFAEE24BEF8EA42C
ike 0:LISBOA2:2390: initiator: main mode get 3rd response...
ike 0:LISBOA2:2390: dec 4431BF4A2E7ED7784D640B7E363B4C9C05100201000000000000005C0800000C010000005D6CF2360B000018FCDE36C23EDD7B36712C23E1638C5BCE874D12320000001C00000001011060024431BF4A2E7ED7784D640B7E363B4C9C
ike 0:LISBOA2:2390: received notify type 24578
ike 0:LISBOA2:2390: PSK authentication succeeded
ike 0:LISBOA2:2390: authentication OK
ike 0:LISBOA2:2390: established IKE SA 4431bf4a2e7ed778/4d640b7e363b4c9c
ike 0:LISBOA2:2390: processing INITIAL-CONTACT
ike 0:LISBOA2: flushing
ike 0:LISBOA2: flushed
ike 0:LISBOA2:2390: processed INITIAL-CONTACT
ike 0:LISBOA2: set oper up
ike 0:LISBOA2: schedule auto-negotiate
ike 0:LISBOA2:2390: no pending Quick-Mode negotiations
ike 0:LISBOA2: link is idle 4 192.168.22.2->ip-publica-vigor2120:4500 dpd=1 seqno=9
ike 0:LISBOA2:2390: send IKEv1 DPD probe, seqno 9
ike 0:LISBOA2:2390: enc 4431BF4A2E7ED7784D640B7E363B4C9C0810050189826178000000540B00001877BC01E1A26A89F9A88BBC30D910B54C9481C678000000200000000101108D284431BF4A2E7ED7784D640B7E363B4C9C00000009
ike 0:LISBOA2:2390: out 4431BF4A2E7ED7784D640B7E363B4C9C08100501898261780000005C5240D38EAAB2CB4BD9D619C4FF0EB7489DA68F736806673AC13C92EE8F15FB9FE3C44A1018CC2E8D7BB2562F44E34BFA7B4FC524D6A7ADC25A34C7A410AC13C8
ike 0:LISBOA2:2390: sent IKE msg (R-U-THERE): 192.168.22.2:4500->ip-publica-vigor2120:4500, len=92, id=4431bf4a2e7ed778/4d640b7e363b4c9c:89826178
ike 0:LISBOA2: NAT keep-alive 4 192.168.22.2->ip-publica-vigor2120:4500.
ike 0:LISBOA2:2390: out FF
ike 0:LISBOA2:2390: sent IKE msg (keepalive): 192.168.22.2:4500->ip-publica-vigor2120:4500, len=1, id=ff00000000000000/0000000081040000:acc21802
ike 0:LISBOA2: link is idle 4 192.168.22.2->ip-publica-vigor2120:4500 dpd=1 seqno=9
ike 0:LISBOA2:2390: send IKEv1 DPD probe, seqno 9
ike 0:LISBOA2:2390: enc 4431BF4A2E7ED7784D640B7E363B4C9C08100501F7AF3075000000540B0000181567D729CF920BA6F36BFC52B5CE3EAEAE171B17000000200000000101108D284431BF4A2E7ED7784D640B7E363B4C9C00000009
ike 0:LISBOA2:2390: out 4431BF4A2E7ED7784D640B7E363B4C9C08100501F7AF30750000005CCBA559255991CF2D5CE648A67733A6D8697C1EEEE5C58E98140D1C4A98AC7F36C74945A8CFE90DAFDED088AB78A7EF4D62FDEA530F5878B9A2C8B3E722760DC5
ike 0:LISBOA2:2390: sent IKE msg (R-U-THERE): 192.168.22.2:4500->ip-publica-vigor2120:4500, len=92, id=4431bf4a2e7ed778/4d640b7e363b4c9c:f7af3075
ike 0:LISBOA2: link is idle 4 192.168.22.2->ip-publica-vigor2120:4500 dpd=1 seqno=9
ike 0:LISBOA2:2390: send IKEv1 DPD probe, seqno 9
ike 0:LISBOA2:2390: enc 4431BF4A2E7ED7784D640B7E363B4C9C08100501A323E9AA000000540B000018424C086ECC2AE844A0A7FD6780627B521A7AB3D9000000200000000101108D284431BF4A2E7ED7784D640B7E363B4C9C00000009
ike 0:LISBOA2:2390: out 4431BF4A2E7ED7784D640B7E363B4C9C08100501A323E9AA0000005CE3C97C417C8C29E4E97EFAB9A83EDE02796094BABA6E7E01C9B2C24D6DA52AD1F24AEBEC5E26B209509B7467E0DAB3FBA95989CFE7BF3AF6A16BF692A8F35673
ike 0:LISBOA2:2390: sent IKE msg (R-U-THERE): 192.168.22.2:4500->ip-publica-vigor2120:4500, len=92, id=4431bf4a2e7ed778/4d640b7e363b4c9c:a323e9aa
diagnose debug ike 0:LISBOA2: NAT keep-alive 4 192.168.22.2->ip-publica-vigor2120:4500.
ike 0:LISBOA2:2390: out FF
ike 0:LISBOA2:2390: sent IKE msg (keepalive): 192.168.22.2:4500->ip-publica-vigor2120:4500, len=1, id=ff00000000000000/0000000011000000:00a11702
ike 0:LISBOA2: link fail 4 192.168.22.2->ip-publica-vigor2120:4500 dpd=1
ike 0:LISBOA2: link down 4 192.168.22.2->ip-publica-vigor2120:4500
ike 0:LISBOA2: deleting
ike 0:LISBOA2: flushing
ike 0:LISBOA2: flushed
ike 0:LISBOA2:2390: send ISAKMP delete 4431bf4a2e7ed778/4d640b7e363b4c9c
ike 0:LISBOA2:2390: enc 4431BF4A2E7ED7784D640B7E363B4C9C08100501F1AB06D7000000500C000018C545A073BB7F5497BC3283578FE0AAC626F7FB3D0000001C00000001011000014431BF4A2E7ED7784D640B7E363B4C9C
ike 0:LISBOA2:2390: out 4431BF4A2E7ED7784D640B7E363B4C9C08100501F1AB06D70000005464A4E6C099C75E6B9CAB1B45FB930050A61649AE0F4FEC6E36CDEB33A9B5CA5D1551B024E990293FE7960E0ACEE872F7F0B3B078DFE61843
ike 0:LISBOA2:2390: sent IKE msg (ISAKMP SA DELETE-NOTIFY): 192.168.22.2:4500->ip-publica-vigor2120:4500, len=84, id=4431bf4a2e7ed778/4d640b7e363b4c9c:f1ab06d7
ike 0:LISBOA2: reset NAT-T
ike 0:LISBOA2: deleted
ike 0:LISBOA2: set oper down
ike 0:LISBOA2: schedule auto-negotiate
disike 0:LISBOA2:2391: initiator: main mode is sending 1st message...
ike 0:LISBOA2:2391: cookie 5d2abc07f8ec1271/0000000000000000
ike 0:LISBOA2:2391: out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
ike 0:LISBOA2:2391: sent IKE msg (ident_i1send): 192.168.22.2:500->ip-publica-vigor2120:500, len=292, id=5d2abc07f8ec1271/0000000000000000
ike 0: comes ip-publica-vigor2120:500->192.168.22.2:500,ifindex=4....
ike 0: IKEv1 exchange=Identity Protection id=5d2abc07f8ec1271/0ca5ed14e550a722 len=120
ike 0: in 5D2ABC07F8EC12710CA5ED14E550A7220110020000000000000000780D000034000000010000000100000028010100010000002001010000800B0001800C7080800100058003000180020002800400050D000014AFCAD71368A1F1C96B8696FC77570100000000144A131C81070358455C5728F20E95452F
ike 0:LISBOA2:2391: initiator: main mode get 1st response...
ike 0:LISBOA2:2391: VID DPD AFCAD71368A1F1C96B8696FC77570100
ike 0:LISBOA2:2391: DPD negotiated
ike 0:LISBOA2:2391: VID RFC 3947 4A131C81070358455C5728F20E95452F
ike 0:LISBOA2:2391: selected NAT-T version: RFC 3947
ike 0:LISBOA2:2391: negotiation result
ike 0:LISBOA2:2391: proposal id = 1:
ike 0:LISBOA2:2391: protocol id = ISAKMP:
ike 0:LISBOA2:2391: trans_id = KEY_IKE.
ike 0:LISBOA2:2391: encapsulation = IKE/none
ike 0:LISBOA2:2391: type=OAKLEY_ENCRYPT_ALG, val=3DES_CBC.
ike 0:LISBOA2:2391: type=OAKLEY_HASH_ALG, val=SHA.
ike 0:LISBOA2:2391: type=AUTH_METHOD, val=PRESHARED_KEY.
ike 0:LISBOA2:2391: type=OAKLEY_GROUP, val=1536.
ike 0:LISBOA2:2391: ISAKMP SA lifetime=28800
ike 0:LISBOA2:2391: out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
ike 0:LISBOA2:2391: sent IKE msg (ident_i2send): 192.168.22.2:500->ip-publica-vigor2120:500, len=292, id=5d2abc07f8ec1271/0ca5ed14e550a722
ike 0: comes ip-publica-vigor2120:500->192.168.22.2:500,ifindex=4....
ike 0: IKEv1 exchange=Identity Protection id=5d2abc07f8ec1271/0ca5ed14e550a722 len=292
ike 0: in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
ike 0:LISBOA2:2391: initiator: main mode get 2nd response...
ike 0:LISBOA2:2391: NAT detected: ME
ike 0:LISBOA2:2391: NAT-T float port 4500
ike 0:LISBOA2:2391: ISAKMP SA 5d2abc07f8ec1271/0ca5ed14e550a722 key 24:F09B7F3A08E7FAD78D7944D362EB0269353626FDB7E73B60
ike 0:LISBOA2:2391: add INITIAL-CONTACT
ike 0:LISBOA2:2391: enc 5D2ABC07F8EC12710CA5ED14E550A72205100201000000000000005C0800000C01000000C0A816020B0000183EECDFEFF43868AFF949A9064EBC4A336D6448E60000001C00000001011060025D2ABC07F8EC12710CA5ED14E550A722
ike 0:LISBOA2:2391: out 5D2ABC07F8EC12710CA5ED14E550A72205100201000000000000006455CBF46D0B38D8057AB7C756F001E98F8955F1FF8235F81E00F4CB754FD3E56174FA6D85168CB3B806FB6EB8A1E078394D9CB03CC53D7EC990C53539C9065576304D48DFA52A1E13
ike 0:LISBOA2:2391: sent IKE msg (ident_i3send): 192.168.22.2:4500->ip-publica-vigor2120:4500, len=100, id=5d2abc07f8ec1271/0ca5ed14e550a722
ike 0: comes ip-publica-vigor2120:4500->192.168.22.2:4500,ifindex=4....
ike 0: IKEv1 exchange=Identity Protection id=5d2abc07f8ec1271/0ca5ed14e550a722 len=92
ike 0: in 5D2ABC07F8EC12710CA5ED14E550A72205100201000000000000005CA0002502E2EC45B42712F48184B3683FEFE9593F763A214079F05115455963349CA29B4F423B6FB7CDEE4516CE6F0F032F6DF20D4B21C7362C71D6D45D9E03E8
ike 0:LISBOA2:2391: initiator: main mode get 3rd response...
ike 0:LISBOA2:2391: dec 5D2ABC07F8EC12710CA5ED14E550A72205100201000000000000005C0800000C010000005D6CF2360B0000183368F8EA1B90D5D2F0A4880C6FEE86756D1A256E0000001C00000001011060025D2ABC07F8EC12710CA5ED14E550A722
ike 0:LISBOA2:2391: received notify type 24578
ike 0:LISBOA2:2391: PSK authentication succeeded
ike 0:LISBOA2:2391: authentication OK
ike 0:LISBOA2:2391: established IKE SA 5d2abc07f8ec1271/0ca5ed14e550a722
ike 0:LISBOA2:2391: processing INITIAL-CONTACT
ike 0:LISBOA2: flushing
ike 0:LISBOA2: flushed
ike 0:LISBOA2:2391: processed INITIAL-CONTACT
ike 0:LISBOA2: set oper up
ike 0:LISBOA2: schedule auto-negotiate
ike 0:LISBOA2:2391: no pending Quick-Mode negotiations
ab

[gabyrossi]

podes mostrar la config de vpn de cada equipo?

saludos.