Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPSEC ERROR: phase2 negotiation failed due to time up waiting for phase1.

    Scheduled Pinned Locked Moved Español
    2 Posts 1 Posters 3.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • tzerpaT Offline
      tzerpa
      last edited by

      Situación:

      Site A con pfsense v2.0 beta 5 Feb 18
      Site B con pfsense v2.0 beta 5 Feb 18
      Site C con pfsense v2.0 beta 5 Feb 18
      Site D con pfsense v2.0 beta 5 Feb 18
      Site E con pfsense v2.0 beta 5 Feb 18

      Los parametros de configuración de IPSEC son los mismos en cada caso tanto en PHASE 1 Como en PHASE 2, solo cambian los parametros tipicos IP Remota y direccion Externa de cada SITE, Preshared KEY es la misma para todos los enlaces VPN

      Se esta utilizando Dyndns con la siguiente configuración:

      Site A –-- siteb.dyndns.org
      Site B ---- siteb.dyndns.org
      Site C ---- sitec.dyndns.org
      Site D ---- sited.dyndns.org
      Site E ---- sitee.dyndns.org

      Las direcciones IP de las redes internas son distintas
      SITE A 192.168.10.X
      SITE B 192.168.11.X
      SITE C 192.168.12.X
      SITE D 192.168.13.X
      SITE E 192.168.14.X

      El resultado es el siguiente

      VPN IPSEC A --- VPN IPSEC B ---- OK
      VPN IPSEC A --- VPN IPSEC C ---- OK
      VPN IPSEC A --- VPN IPSEC D ---- "ERROR: phase2 negotiation failed due to time up waiting for phase1."
      VPN IPSEC A --- VPN IPSEC E ---- "ERROR: phase2 negotiation failed due to time up waiting for phase1."

      No hay manera de conectarse con los sitios D y E

      Cualquier ayuda es agradecida de antemano.

      1 Reply Last reply Reply Quote 0
      • tzerpaT Offline
        tzerpa
        last edited by

        Esta es una muestra del log con los mensajes recibidos

        –----------------
        Feb 22 10:00:25 racoon: ERROR: phase1 negotiation failed due to time up. 1d3ba1197c252e5f:0000000000000000
        Feb 22 10:00:06 racoon: INFO: delete phase 2 handler.
        Feb 22 10:00:06 racoon: [aaa.aaa.aaa.aaa] ERROR: phase2 negotiation failed due to time up waiting for phase1. ESP aaa.aaa.aaa.aaa[0]->bbb.bbb.bbb.bbb[0]
        Feb 22 09:59:35 racoon: INFO: begin Aggressive mode.
        Feb 22 09:59:35 racoon: [site-C]: INFO: initiate new phase 1 negotiation: bbb.bbb.bbb.bbb[500]<=>aaa.aaa.aaa.aaa[500]
        Feb 22 09:59:35 racoon: [site-C]: INFO: IPsec-SA request for aaa.aaa.aaa.aaa queued due to no phase1 found.
        –----------------

        Nuevamente agradezco de antemano cualquier ayuda

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.