Re: [Ipsec-tools-devel] Racoon +PIX 515

[Michal L. <mi...@lo...>]

On Thu, 15 Apr 2004, Wilfried BARNAVON RPi wrote:

> Well here is the racoon debug:
> INFO: initiate new phase 2 negotiation: 81.255.81.44[0]<=>81.255.86.117[0]
> 2004-04-15 05:28:58: ERROR: unknown notify message, no phase2 handle found.

Could you start racoon with more verbosity? I.e. "racoon -v"

> In fact I suspect the PIX 515 not understanding IPCOMP.
> However I don't know howto deactivate the compression in the SA through
> Racoon. I can't put other
> argument that "DEFLATE".

You can delete the whole line. But unless you have ipcomp specified in the
policies (give us your "setkey -DP" output)  it shouldn't hurt...

Michal Ludvig
-- 
* A mouse is a device used to point at the xterm you want to type in.
* Personal homepage - http://www.logix.cz/michal