Disclaimer

The content of this material are challenges faced onsite and how I personally resolved them. Please be noted that solutions posted here

1> should not be considered as ultimate. The material may be considered for reference only.

2> should not be considered as guarantee that solutions may work. Contact Cyberoam support before making any changes.

3> blog does NOT belong to the Cyberoam. It's a blog...a personal blog.

Changes done after referring this site may seriously damage the network. So...

........DO CHANGES AT YOUR OWN RISK

(please contact cyberoamsupport before implementing any changes)

Thursday, 8 December 2011

Cyberoam IPSec Error


Cyberoam IPSec logs may give you pretty good clues about the error. To check the logs you need to type the command

show vpn IPSec-logs
(use can use tab just to complete the command)

Below is the error from the above said logs:

ERROR: asynchronous network error report on eth1 (sport=500) for message to 60.51.xxx.xxx port 500, complainant 60.51.xxx.xxx: Connection refused [errno 111, origin ICMP type 3 code 3 (not authenticated)]


Solution: There is nothing much  you can do about this. The error simply says that the port 500 is not open at the other end or the pluto is not working at the other end. We can know later that port 500 was blocked by the ISP. Pretty Strange but that was all.


No comments:

Post a Comment