<![CDATA[OPTX: THE PACKET IS RETRANSMITTED BY…]]>Error when using OPTX interface:

Jul 10 09:08:50 racoon: ERROR: phase1 negotiation failed due to time up.
Jul 10 09:08:46 racoon: NOTIFY: the packet is retransmitted by REMOTE GATEWAY[500].
Jul 10 09:08:41 racoon: NOTIFY: couldn't find the proper pskey, try to get one by the peer's address.
Jul 10 09:08:41 racoon: WARNING: SPI size isn't zero, but IKE proposal.
Jul 10 09:08:41 racoon: WARNING: No ID match.
Jul 10 09:08:41 racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-03
Jul 10 09:08:41 racoon: INFO: begin Aggressive mode.
Jul 10 09:08:41 racoon: INFO: respond new phase 1 negotiation: OPTX[500]<=>REMOTE GATEWAY[500]

someone knows how to resolve the "the packet is retransmitted by…" problem or the configuration steps for enable IPSEC traffic on OPTX interfaces?

a simple question: is IPSEC on OPTX interfaces supported by pfsense?

]]>https://forum.netgate.com/topic/5146/optx-the-packet-is-retransmitted-byRSS for NodeSat, 06 Jun 2026 16:42:10 GMTTue, 10 Jul 2007 08:57:57 GMT60<![CDATA[Reply to OPTX: THE PACKET IS RETRANSMITTED BY… on Tue, 25 Sep 2007 18:55:11 GMT]]>yes, seems to work.

Thanks!

]]>https://forum.netgate.com/post/159997https://forum.netgate.com/post/159997Tue, 25 Sep 2007 18:55:11 GMT<![CDATA[Reply to OPTX: THE PACKET IS RETRANSMITTED BY… on Tue, 18 Sep 2007 13:55:43 GMT]]>Yes, the 'destination network' under system, static routes is the same IP you entered for 'remote gateway' on the IPSec tunnel.

]]>https://forum.netgate.com/post/159721https://forum.netgate.com/post/159721Tue, 18 Sep 2007 13:55:43 GMT<![CDATA[Reply to OPTX: THE PACKET IS RETRANSMITTED BY… on Tue, 18 Sep 2007 11:21:44 GMT]]>Some questions:

Network: (remote endpoint of ipsec tunnel/32), is the public IP of the remote gateway?
i must add these routes on the SYSTEM>STATIC ROUTES section of the webconfigurator?

Thanks.

]]>https://forum.netgate.com/post/159715https://forum.netgate.com/post/159715Tue, 18 Sep 2007 11:21:44 GMT<![CDATA[Reply to OPTX: THE PACKET IS RETRANSMITTED BY… on Wed, 05 Sep 2007 19:56:22 GMT]]>I used something like this:
interface: OPT1
Network: (remote endpoint of ipsec tunnel/32)
Gateway: (gateway of OPT1 interface)

]]>https://forum.netgate.com/post/159368https://forum.netgate.com/post/159368Wed, 05 Sep 2007 19:56:22 GMT<![CDATA[Reply to OPTX: THE PACKET IS RETRANSMITTED BY… on Wed, 05 Sep 2007 09:01:44 GMT]]>I still need help on how to create the routes necessary to make work IPSEC in OPTX interfaces….

]]>https://forum.netgate.com/post/159345https://forum.netgate.com/post/159345Wed, 05 Sep 2007 09:01:44 GMT<![CDATA[Reply to OPTX: THE PACKET IS RETRANSMITTED BY… on Thu, 19 Jul 2007 21:53:37 GMT]]>Somebody can explain how to create the routes necessary to make work IPSEC in OPTX in 1.2b2?

Help!

]]>https://forum.netgate.com/post/157774https://forum.netgate.com/post/157774Thu, 19 Jul 2007 21:53:37 GMT<![CDATA[Reply to OPTX: THE PACKET IS RETRANSMITTED BY… on Wed, 18 Jul 2007 01:29:58 GMT]]>You could detail with an example the procedure to create this route correctly to make work IPSEC in an interface OPTX?

LAN 172.26.0.0/24 WAN X.X.X.X.X REMOTE GATEWAY Y.Y.Y.Y REMOTE LAN 192.168.1.0/24

It is not possible to apply the same procedure that automatically creates the routes in the WAN interface?

In the version 1.2b1 the tunnels ipsec in OPTX worked correctly until a certain point and in case of falling, reinitiating physically  the router (power down/up) in many cases gets the tunnels up and running (automatically  recreating routes?).

I have interest in making work IPSEC in interfaces OPTX, since my configuration would require of tunnels in WAN, OPT1 and OPT2 with about 25 tunnels each one. It would be technically feasible to attain this with pfsense?

Thanks.

]]>https://forum.netgate.com/post/157699https://forum.netgate.com/post/157699Wed, 18 Jul 2007 01:29:58 GMT<![CDATA[Reply to OPTX: THE PACKET IS RETRANSMITTED BY… on Tue, 17 Jul 2007 20:28:56 GMT]]>Yes  but it requires a static route.

]]>https://forum.netgate.com/post/157691https://forum.netgate.com/post/157691Tue, 17 Jul 2007 20:28:56 GMT<![CDATA[Reply to OPTX: THE PACKET IS RETRANSMITTED BY… on Tue, 17 Jul 2007 20:22:54 GMT]]>IPSEC on OPTX interfaces is supported on 1.2b2?

]]>https://forum.netgate.com/post/157690https://forum.netgate.com/post/157690Tue, 17 Jul 2007 20:22:54 GMT