IPSEC with mobile client endpoint problem



  • Hi,
    I've configured with the help of some guys the ipsec tunnel between PF 2.0 Final and IPHONE 4. It' works for some days and now i' can't connect from my iphone into PF box because RACOON wont start.
    In the log appear:

    
    Oct 31 08:07:10 	php: /vpn_ipsec_phase1.php: Reload VPN tunnel(s)
    Oct 31 08:07:21 	php: /vpn_ipsec_phase1.php: Could not determine VPN endpoint for 'VPN'
    Oct 31 08:07:21 	check_reload_status: Syncing firewall
    Oct 31 08:09:07 	php: /vpn_ipsec_phase2.php: Could not determine VPN endpoint for 'VPN'
    Oct 31 08:09:07 	check_reload_status: Syncing firewall
    Oct 31 08:09:16 	php: /vpn_ipsec.php: Could not determine VPN endpoint for 'VPN'
    Oct 31 08:09:16 	check_reload_status: Reloading filter
    
    

    I've tried to setup the tunnel again but this error always apper.
    Any ideas?



  • I've tried everything..
    I'vee se the if statement that generate the error in vpn.inc:

    
    if (!is_ipaddr($phase1['remote-gateway'])) {
    if(! $g['booting']) {	
    $rgip = resolve_retry($phase1['remote-gateway']);
    add_hostname_to_watch($phase1['remote-gateway']);		
    } else {
    add_hostname_to_watch($phase1['remote-gateway']);
    }
    if (!is_ipaddr($rgip)) {
    log_error("Could not determine VPN endpoint for '{$phase1['descr']}'");
    return false;
    }
    
    

    There is a problem on remote gw variable.. Any idea?


  • Rebel Alliance Developer Netgate

    That error is not your problem. That error is harmless. Mobile tunnels have no remote gateway, so that error isn't really saying anything significant. The system log is not where you should be looking, check the IPsec tab.


Locked