ohneahnung
Goto Top

VPN Verbindung zwischen Netgear FVS336Gv2 und Fitzbox 7390 - Problem

Ich habe seit einiger Zeit folgendes Problem.

Seit dem letzten Update des FritzBox OS (vermute ich zumindest) wird die permanente VPN Verbindung
zwischen den beiden Standorten (FritzBox 7390 und Netgear FVS336Gv2) nicht mehr korrekt aufgebaut.

Sobald ich die VPN Policiy auf dem Netgear Router manuell deaktiviere und danach wieder aktiviere funktioniert
der VPN Aufbau. Mach Ablauf der LifeTime 3600sec wird eine weitere Verbindung nur noch im Glücksfall
aufgebaut. Manchmal ja, meistens nein. In der FritzBox wird stets eine korrekte VPN Verbindung angezeigt
(Leider sind die Log-Dateien dort Mangelware)

Da die Konfiguration dem Grunde nach funktioniert, bin ich mit meinem Latein am Ende....

Vielleicht hat jemand eine Idee.

Danke!!

Dirk


1.) VPN Config Netgear

098638e150c5bbde73e23ac3a417f9cc
970fd148599c42e6f5f5c1fad0a5188c

2.) VPN Config FritzBox

b7b81f1b2d8391cbd437208ebaf1c39a

3.) Auszug aus der VPN Log des Netgear
- Verbindung heute um 09:32 Uhr hat genau eine Stunde funtioniert, danach wurde die VPN automatisch
nicht mehr aufgebaut....

Sun Nov 16 10:27:58 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: Phase 1 negotiation failed due to time up for IP_Fritzbox[500]. a94c878c61482e7a:411ebba02320a4f0
Sun Nov 16 10:26:14 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: an undead schedule has been deleted: 'pk_recvupdate'.
Sun Nov 16 10:26:14 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Sending Informational Exchange: delete payload
Sun Nov 16 10:26:12 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] IPsec-SA established: ESP/Tunnel IP_Netgear->IP_Fritzbox with spi=1494557379(0x591522c3)
Sun Nov 16 10:26:12 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] IPsec-SA established: ESP/Tunnel IP_Fritzbox->IP_Netgear with spi=239225760(0xe424ba0)
Sun Nov 16 10:26:12 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] IPsec-SA established: ESP/Tunnel IP_Netgear->IP_Fritzbox with spi=2245343959(0x85d53ad7)
Sun Nov 16 10:26:12 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] IPsec-SA established: ESP/Tunnel IP_Fritzbox->IP_Netgear with spi=105401507(0x6484ca3)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: attribute has been modified.
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=0 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=d7460bdf spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=DEFLATE)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=IPCOMP spisize=2 spi=000083c2 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=0 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=591a6851 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=0 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=82eaeb6c spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=192 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=5138ab5e spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=DEFLATE)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=IPCOMP spisize=2 spi=000084e5 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=192 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=4253d178 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=192 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=f59e881b spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=256 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=895917b9 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=DEFLATE)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=IPCOMP spisize=2 spi=000057f9 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=256 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=83df8736 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=256 authtype=hmac-sha)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=30e00011 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 10:26:11 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 10:26:10 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 10:26:10 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 10:26:10 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 10:26:10 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 10:26:10 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 10:26:10 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 10:26:10 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Using IPsec SA configuration: 192.168.20.0/24<->192.168.10.0/24
Sun Nov 16 10:26:10 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Responding to new phase 2 negotiation: IP_Netgear<=>IP_Fritzbox
Sun Nov 16 10:26:10 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Initiating new phase 2 negotiation: IP_Netgear<=>IP_Fritzbox
Sun Nov 16 10:26:10 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Sending Informational Exchange: notify payload[INITIAL-CONTACT]
Sun Nov 16 10:26:10 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: ISAKMP-SA established for IP_Netgear[500]-IP_Fritzbox[500] with spi:244dd27f2da1ff46:d6a2c11c791f92a5
Sun Nov 16 10:26:10 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Ignore INITIAL-CONTACT notification from IP_Fritzbox[500] because it is only accepted after phase1.
Sun Nov 16 10:26:09 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: remote configuration for identifier "externes_netz.dyndns.org" found
Sun Nov 16 10:26:09 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: remote configuration for identifier "externes_netz.dyndns.org" found
Sun Nov 16 10:26:09 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Using IPsec SA configuration: 192.168.20.0/24<->192.168.10.0/24
Sun Nov 16 10:26:09 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Received Vendor ID: DPD
Sun Nov 16 10:26:09 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt
Sun Nov 16 10:26:09 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Beginning Aggressive mode.
Sun Nov 16 10:26:09 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Received request for new phase 1 negotiation: IP_Netgear[500]<=>IP_Fritzbox[500]
Sun Nov 16 10:26:09 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: Policy Update to the kernel succeeded for externes_netz.dyndns.org
Sun Nov 16 10:26:09 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Remote configuration for identifier "externes_netz.dyndns.org" found
Sun Nov 16 10:26:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Received Vendor ID: DPD
Sun Nov 16 10:26:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt
Sun Nov 16 10:26:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Beginning Aggressive mode.
Sun Nov 16 10:26:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Received request for new phase 1 negotiation: IP_Netgear[500]<=>IP_Fritzbox[500]
Sun Nov 16 10:26:07 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: Policy Update to the kernel succeeded for externes_netz.dyndns.org
Sun Nov 16 10:26:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: an undead schedule has been deleted: 'purge_remote'.
Sun Nov 16 10:26:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Purged ISAKMP-SA with spi=fce3be6f85ddaa44:f2d666d06d0ea541.
Sun Nov 16 10:26:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] Purged IPsec-SA with spi=240332528(0xe532ef0).
Sun Nov 16 10:26:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] Purged IPsec-SA with spi=173249548(0xa53940c).
Sun Nov 16 10:26:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] Purged IPsec-SA with spi=3064721256(0xb6abef68).
Sun Nov 16 10:26:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] Purged IPsec-SA with spi=772875577(0x2e112539).
Sun Nov 16 10:26:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Sending Informational Exchange: delete payload
Sun Nov 16 10:26:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: an undead schedule has been deleted: 'pk_recvupdate'.
Sun Nov 16 10:26:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Remote configuration for identifier "externes_netz.dyndns.org" found
Sun Nov 16 10:20:12 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] IPsec-SA established: ESP/Tunnel IP_Netgear->IP_Fritzbox with spi=772875577(0x2e112539)
Sun Nov 16 10:20:12 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] IPsec-SA established: ESP/Tunnel IP_Fritzbox->IP_Netgear with spi=173249548(0xa53940c)
Sun Nov 16 10:20:11 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: attribute has been modified.
Sun Nov 16 10:20:11 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] IPsec-SA expired: ESP/Tunnel IP_Fritzbox->IP_Netgear with spi=240332528(0xe532ef0)
Sun Nov 16 10:20:11 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Initiating new phase 2 negotiation: IP_Netgear[500]<=>IP_Fritzbox
Sun Nov 16 10:20:11 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: remote configuration for identifier "externes_netz.dyndns.org" found
Sun Nov 16 10:20:11 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] IPsec-SA expired: ESP/Tunnel IP_Netgear->IP_Fritzbox with spi=3064721256(0xb6abef68)
Sun Nov 16 09:32:15 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: an undead schedule has been deleted: 'pk_recvupdate'.
Sun Nov 16 09:32:15 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Sending Informational Exchange: delete payload
Sun Nov 16 09:32:10 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] IPsec-SA established: ESP/Tunnel IP_Netgear->IP_Fritzbox with spi=3064721256(0xb6abef68)
Sun Nov 16 09:32:10 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] IPsec-SA established: ESP/Tunnel IP_Fritzbox->IP_Netgear with spi=240332528(0xe532ef0)
Sun Nov 16 09:32:10 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: attribute has been modified.
Sun Nov 16 09:32:10 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] IPsec-SA established: ESP/Tunnel IP_Netgear->IP_Fritzbox with spi=4003255771(0xee9cd5db)
Sun Nov 16 09:32:09 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: [IPSEC_VPN] IPsec-SA established: ESP/Tunnel IP_Fritzbox->IP_Netgear with spi=179130635(0xaad510b)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Initiating new phase 2 negotiation: IP_Netgear[500]<=>IP_Fritzbox
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=0 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=0128de4e spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=DEFLATE)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=IPCOMP spisize=2 spi=0000578f spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=0 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=efd098ee spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=0 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=eafbbe44 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=192 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=10654547 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=DEFLATE)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=IPCOMP spisize=2 spi=00000457 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=192 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=043630f2 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=192 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=f7b1845d spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=256 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=2f754427 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=DEFLATE)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=IPCOMP spisize=2 spi=00003251 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=256 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=4ed5a075 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Phase 2 proposal by IP_Fritzbox did not match.
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=3DES encklen=0 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=00000000 spi_p=00000000 encmode=Tunnel reqid=1:1)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Local Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (trns_id=RIJNDAEL encklen=256 authtype=hmac-sha)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: (proto_id=ESP spisize=4 spi=07f12227 spi_p=00000000 encmode=Tunnel reqid=0:0)
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Peer's Proposal:
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 09:32:08 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 09:32:07 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 09:32:07 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 09:32:07 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 09:32:07 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 09:32:07 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 09:32:07 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: invalid transform-id=4 in IPCOMP.
Sun Nov 16 09:32:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Using IPsec SA configuration: 192.168.20.0/24<->192.168.10.0/24
Sun Nov 16 09:32:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Responding to new phase 2 negotiation: IP_Netgear<=>IP_Fritzbox
Sun Nov 16 09:32:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Sending Informational Exchange: notify payload[INITIAL-CONTACT]
Sun Nov 16 09:32:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: ISAKMP-SA established for IP_Netgear[500]-IP_Fritzbox[500] with spi:fce3be6f85ddaa44:f2d666d06d0ea541
Sun Nov 16 09:32:07 2014 (GMT +0100): [FVS336Gv2] [IKE] WARNING: Ignore INITIAL-CONTACT notification from IP_Fritzbox[500] because it is only accepted after phase1.
Sun Nov 16 09:32:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: remote configuration for identifier "externes_netz.dyndns.org" found
Sun Nov 16 09:32:07 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: remote configuration for identifier "externes_netz.dyndns.org" found
Sun Nov 16 09:32:06 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Received Vendor ID: DPD
Sun Nov 16 09:32:06 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt
Sun Nov 16 09:32:06 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Beginning Aggressive mode.
Sun Nov 16 09:32:06 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Received request for new phase 1 negotiation: IP_Netgear[500]<=>IP_Fritzbox[500]
Sun Nov 16 09:32:06 2014 (GMT +0100): [FVS336Gv2] [IKE] ERROR: Policy Update to the kernel succeeded for externes_netz.dyndns.org
Sun Nov 16 09:32:06 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Remote configuration for identifier "externes_netz.dyndns.org" found
Sun Nov 16 09:32:02 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: accept a request to establish IKE-SA: externes_netz.dyndns.org
Sun Nov 16 09:32:02 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Adding IKE configuration with identifier "FritzBox"
Sun Nov 16 09:32:02 2014 (GMT +0100): [FVS336Gv2] [IKE] INFO: Adding IPSec configuration with identifier "FritzBox"

Content-Key: 254968

Url: https://administrator.de/contentid/254968

Ausgedruckt am: 28.03.2024 um 08:03 Uhr

Mitglied: orcape
orcape 16.11.2014 aktualisiert um 11:42:32 Uhr
Goto Top
Hi,
Seit dem letzten Update des FritzBox OS (vermute ich zumindest)...
Du hast den Tunnelzugriff auf Fritzbox-Seite per DynDNS realisiert.
Hier läuft eventuell was schief, Deine Vermutung mit der Aktualisierung des FritzOS ist wohl zutreffend.
ERROR: Phase 1 negotiation failed due to time up for IP_Fritzbox
..diese Fehlermeldung sollte eigentlich alles sagen.
Kannst Du die vorhergehende Firmware auf die Fritte noch mal aufspielen ?
Gruß orcape
Mitglied: ohneahnung
ohneahnung 16.11.2014 um 13:44:51 Uhr
Goto Top
Ich weiss nicht, wo ich die "alte" Firmware herbekomme,
da AVM dies automatisch über die FritzBox Oberfläche regelt.

Wenn das Problem an DynDns liegt, weshalb klappt denn die erste
Verbindung problematisch???
Das verstehe ich nicht....
Es funktioniert ja einmal....
Mitglied: orcape
orcape 16.11.2014 aktualisiert um 13:50:02 Uhr
Goto Top
http://avm.de/nc/service/fritzbox/fritzbox-7390/wissensdatenbank/public ...
..versuch´s einfach.
Vergiss nicht Deine Daten zu sichern.
Mitglied: aqui
aqui 17.11.2014 um 03:56:30 Uhr
Goto Top