<![CDATA[Exchange type 6]]>I'm trying to get ShrewSoft VPN client to do IPSec to the pfSense. All goes well (I think!) until ISAKMP fails with an exchange type 6:

Nov 13 23:52:17 	racoon: ERROR: Invalid exchange type 6 from 213.208.116.33[500].
Nov 13 23:52:17 	racoon: INFO: ISAKMP-SA established 10.230.10.2[500]-213.208.116.33[500] spi:6301b7c71343d988:d97babeee7cdd9f6
Nov 13 23:52:17 	racoon: INFO: received Vendor ID: DPD
Nov 13 23:52:17 	racoon: INFO: received broken Microsoft ID: FRAGMENTATION
Nov 13 23:52:17 	racoon: INFO: received Vendor ID: RFC 3947
Nov 13 23:52:17 	racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-02
Nov 13 23:52:17 	racoon: INFO: received Vendor ID: CISCO-UNITY
Nov 13 23:52:17 	racoon: INFO: begin Aggressive mode.
Nov 13 23:52:17 	racoon: INFO: respond new phase 1 negotiation: 10.230.10.2[500]<=>213.208.116.33[500]

Anyone know what this means, or how to fix it? I'm assuming this is phase 2 since it stops before this if I make a mess of phase 1.

]]>https://forum.netgate.com/topic/2601/exchange-type-6RSS for NodeThu, 16 Apr 2026 01:33:06 GMTMon, 13 Nov 2006 23:42:54 GMT60<![CDATA[Reply to Exchange type 6 on Wed, 29 Nov 2006 10:17:04 GMT]]>Yepp I got the same problem and have anyone any clue to solve it???

Greetings, Marcel

]]>https://forum.netgate.com/post/144980https://forum.netgate.com/post/144980Wed, 29 Nov 2006 10:17:04 GMT<![CDATA[Reply to Exchange type 6 on Tue, 28 Nov 2006 01:47:53 GMT]]>OMG! Now world+dog will think it's me that's broken it  :o

]]>https://forum.netgate.com/post/144913https://forum.netgate.com/post/144913Tue, 28 Nov 2006 01:47:53 GMT<![CDATA[Reply to Exchange type 6 on Mon, 27 Nov 2006 23:34:34 GMT]]>I am also having this exact same issue..

I just tried 1.0, and the 2.0 Alpha of the Shrew Soft client. The client hangs at "Bringing up tunnel" and the pfsense ipsec logs

"racoon: ERROR: Invalid exchange type 6 from xxx.xxx.xxx.xxx"

I've tried all that I can think.. This post is actually the first thing that came up on google.. :)

Riley

]]>https://forum.netgate.com/post/144906https://forum.netgate.com/post/144906Mon, 27 Nov 2006 23:34:34 GMT