Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPsec - site (2.2) to site (2.1.2)

    2.2 Snapshot Feedback and Problems - RETIRED
    3
    5
    2.6k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Raul RamosR
      Raul Ramos
      last edited by

      Hi

      Trying to connect 2.2 (built on Fri Jun 20 07:36:50 CDT 2014 ) to a 2.1.2 box and give-me error:

      "charon 05[NET] received unsupported IKE version 1.0 from 85.246.xx.xx, sending INVALID_MAJOR_VERSION" initiating from 2.1.2 and "charon: 15[IKE] IKE version 1 not supported" initiating from 2.2

      In 2.2 i chose v1 on IKE type the rest is normal stuff.

      pfSense:
      ASRock -> Wolfdale1333-D667 (2GB TeamElite Ram)
      Marvell 88SA8040 Sata to CF(Sandisk 4GB) Controller
      NIC's: RTL8100E (Internal ) and Intel® PRO/1000 PT Dual (Intel 82571GB)

      1 Reply Last reply Reply Quote 0
      • jimpJ
        jimp Rebel Alliance Developer Netgate
        last edited by

        Looks like there was a problem with the way the ipsec daemon was built in the current snaps. It should be better on the ones later today/tomorrow

        Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

        Need help fast? Netgate Global Support!

        Do not Chat/PM for help!

        1 Reply Last reply Reply Quote 0
        • A
          ankaerith
          last edited by

          I've been unable to get the mobile client working.  I installed the snapshot from Thu Jun 12 07:00:01 CDT 2014 and then loaded my saved configuration from before.

          This appears to be relevant error from the log:

          Jun 23 21:37:34 charon: 06[NET] received unsupported IKE version 1.0 from 2.2.2.2, sending INVALID_MAJOR_VERSION

          Google has turned up very little, and I've tried IKE v1 and v2 on the configuration as well as turning on and off AES-NI (I wasn't using it in 2.1.x)

          The mobile client is an OSX IPsec connection.

          1 Reply Last reply Reply Quote 0
          • jimpJ
            jimp Rebel Alliance Developer Netgate
            last edited by

            Try a current snapshot, not the older ones.

            Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

            Need help fast? Netgate Global Support!

            Do not Chat/PM for help!

            1 Reply Last reply Reply Quote 0
            • A
              ankaerith
              last edited by

              @jimp:

              Try a current snapshot, not the older ones.

              The latest snapshot resolved it.

              1 Reply Last reply Reply Quote 0
              • First post
                Last post
              Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.