benjarobbi / get-a-robot-vpnc

Automatically exported from code.google.com/p/get-a-robot-vpnc
1 stars 0 forks source link

connection failed HTC desire 2.1-update1 #150

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1.start either data or wifi connection 
2. start vpnc program and long press the connection
3. click connect

What is the expected output? What do you see instead?
VPN connected. failed to connect

What version of the product are you using? On what operating system?
ver 0.99 and debug version. Android kernal ver 2.6.29-e3566335

Please provide any additional information below.
I've rooted the phone (unrevoked3) I got the tun.ko module to load and i get no 
errors in Dalvik debug monitor when i'm loading the program and trying to 
connect and when the connection fails (just watching errors) what i'm trying to 
do is connect to a juniper Netscreen 25 on the juniper i see the attempted 
connection in the logs it is stating Rejected an IKE packet on ethernet2 from 
##.###.###.#:23699 to ##.###.###.#:500 with cookies 96cc81760b390a6a and 
0000000000000000 because an initial Phase 1 packet arrived from an unrecognized 
peer gateway what i expected to see is IKE<##.###.###.#> Phase 1: Responder 
starts AGGRESSIVE mode negotiations. Can anyone help? I'm i using the right 
program? has anyone had any success conneting with VPNC to a juniper firewall?

Original issue reported on code.google.com by powellne...@gmail.com on 3 Mar 2011 at 9:07

GoogleCodeExporter commented 9 years ago
[deleted comment]
GoogleCodeExporter commented 9 years ago
Yes i am using Juniper and samsung tab, i don't know details of server though,
just try using different flags(you need to add all flags once separated by 
space via add flag menu option) 
first try with command line , what worked for me was 
/data/data/org.codeandroid.vpnc_frontend/files/vpnc --script 
/data/data/org.codeandroid.vpnc_frontend/files/vpnc-script --natt-mode 
cisco-udp --debug 99   --vendor netscreen

remove mode 99 later.
All the best.

Original comment by sailesh....@gmail.com on 4 Mar 2011 at 9:07

GoogleCodeExporter commented 9 years ago
thanks for your quick response and the good info
I added the flags you suggested and were getting closer now when i try to 
connect the netscreen logs show me 
IKE<##.###.###.##> Phase 1: Responder starts AGGRESSIVE mode negotiations.
IKE<##.###.###.##>: Received a notification message for DOI <1> <24578> 
<INITIAL-CONTACT>.
IKE<##.###.###.##>: Received initial contact notification and removed Phase 2 
SAs.
IKE<##.###.###.##> Phase 1: Completed for user <???????@???????????.com>. 
IKE<##.###.###.##> Phase 1: Completed Aggressive mode negotiations with a 
<28800>-second lifetime.
IKE<##.###.###.##>: Received initial contact notification and removed Phase 1 
SAs.

Then two minutes later i get these entries

IKE<##.###.###.##>: XAuth login failed for gateway <XAuth_GW_BV_P1>, username 
<correct username>, retry: 2,timeout: 1.
IKE<##.###.###.##> Phase 1: Aborted negotiations because the time limit has 
elapsed. (0000/278337583)
I checked the help via /data/data/org.codeandroid.vpnc_frontend/files/vpnc 
--long-help and tried serveral flags all entered by the menu option add flag. I 
have also changed my password on the netscreen to see if that was it but no 
luck. Any other ideas? again thanks for all your help

P.S. I just wanted to say these forums are great and kudos to all that post 
here and give support thanks all

Original comment by powellne...@gmail.com on 4 Mar 2011 at 11:30

GoogleCodeExporter commented 9 years ago
Ok i've got past the login "dam autocorrect" it was adding a cap to the 
password when i typed it in but i could not see it. Anyway i'm am now stuck at 
phase 2 "no policy exists for proxy ID" it seams that i cannot add the flag 
--local-addr ###.##.#.# to the config it states "failed to bind to 
###.##.#.#:500: cannot assign requested address" can anyone help? 

so close i can taste it!

Original comment by powellne...@gmail.com on 5 Mar 2011 at 6:27