Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPSec und iPhone geht nicht (Gelöst)

    Deutsch
    1
    2
    1.4k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      mrsunfire
      last edited by

      Hallo!

      Ich habe versucht IPSec mit meinem iPhone zu nutzen und pfSense entsprechend konfiguriert. Wähle ich mich nun mit dem Handy über das Handynetz ein, erhalte ich folgende Logs:

      
Apr 28 21:56:18 	racoon: ERROR: phase1 negotiation failed due to time up. 0985ed9e138db769:1ed03d17ad13ddae
Apr 28 21:55:58 	racoon: INFO: Adding xauth VID payload.
Apr 28 21:55:58 	racoon: [Self]: [WAN IP] INFO: Hashing WAN IP[500] with algo #2 (NAT-T forced)
Apr 28 21:55:58 	racoon: [iPhone IP] INFO: Hashing iPHone IP[500] with algo #2 (NAT-T forced)
Apr 28 21:55:58 	racoon: INFO: Adding remote and local NAT-D payloads.
Apr 28 21:55:58 	racoon: [iPhone IP] INFO: Selected NAT-T version: RFC 3947
Apr 28 21:55:58 	racoon: INFO: received Vendor ID: DPD
Apr 28 21:55:58 	racoon: INFO: received Vendor ID: CISCO-UNITY
Apr 28 21:55:58 	racoon: INFO: received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt
Apr 28 21:55:58 	racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-02
Apr 28 21:55:58 	racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-02
Apr 28 21:55:58 	racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-03
Apr 28 21:55:58 	racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-04
Apr 28 21:55:58 	racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-05
Apr 28 21:55:58 	racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-06
Apr 28 21:55:58 	racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-07
Apr 28 21:55:58 	racoon: INFO: received Vendor ID: draft-ietf-ipsec-nat-t-ike-08
Apr 28 21:55:58 	racoon: INFO: received Vendor ID: RFC 3947
Apr 28 21:55:58 	racoon: INFO: begin Aggressive mode.
Apr 28 21:55:58 	racoon: [Self]: INFO: respond new phase 1 negotiation: WAN IP[500]<=>iPhone IP[500]

      Port 500, sowie 4500 sind als Rule bei IPSec für sämtliche Sources und Destinations freigegeben.

      Versuche ich mich über das LAN Subnet einzuwählen, funktioniert alles einwandfrei. Wo liegt das Problem?

      Netgate 6100 MAX

      1 Reply Last reply Reply Quote 0
      • M
        mrsunfire
        last edited by

        Problem gelöst!

        Ich habe vergessen die Ports 500, 4500 und ESP als WAN Regel freizugeben! Nun geht es!

        Netgate 6100 MAX

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.