Wondering is someone can shed some light on this. We had a D-link DI-808HV set up with a Site to Site VPN with our Cisco VPN 3005 for a few days. It worked but we noticed alot of hanging on the VPN tunnel so we upgraded the firmware on the D-Link and now we can't even get phase 2 to complete. I can't figure out what the problem might be from the logs...
Dlink log Thursday November 29, 2007 20:46:11 IKE Phase1 (ISAKMP SA) established : [IP2][IP1] Thursday November 29, 2007 20:46:11 Send IKE Q1(QINIT) : 192.168.11.0
--> 192.168.50.0 Thursday November 29, 2007 20:46:12 Receive IKE Q2(QRESP) : [192.168.50.0|IP1]-->[IP2|192.168.11.0] Thursday November 29, 2007 20:46:16 IKED re-TX : QINIT to IP1 Thursday November 29, 2007 20:46:16 Receive IKE Q2(QRESP) : [192.168.50.0|IP1]-->[IP2|192.168.11.0] Thursday November 29, 2007 20:46:21 IKED re-TX : QINIT to IP1 Thursday November 29, 2007 20:46:21 Receive IKE Q2(QRESP) : [192.168.50.0|IP1]-->[IP2|192.168.11.0] Thursday November 29, 2007 20:46:29 Receive IKE Q2(QRESP) : [192.168.50.0|IP1]-->[IP2|192.168.11.0] Thursday November 29, 2007 20:46:31 IKED re-TX : QINIT to IP1 Thursday November 29, 2007 20:46:37 Receive IKE INFO : IP1 --> IP2 Thursday November 29, 2007 20:46:37 Receive IKE INFO : IP1 --> IP2 Thursday November 29, 2007 20:46:37 Receive IKE (INFO) : delete IP1 ->
IP2 phase 1
Cisco Log
59587 11/29/2007 18:40:38.380 SEV=4 IKE/119 RPT=7063 IP2 Group [IP2] PHASE 1 COMPLETED
59588 11/29/2007 18:40:38.380 SEV=6 IKE/121 RPT=5430 IP2 Keep-alive type for this connection: None
59589 11/29/2007 18:40:38.380 SEV=6 IKE/122 RPT=185 IP2 Keep-alives configured on but peer does not support keep-alives (type = None)
59590 11/29/2007 18:40:38.380 SEV=5 IKE/35 RPT=2242 IP2 Group [IP2] Received remote IP Proxy Subnet data in ID Payload: Address 192.168.11.0, Mask 255.255.255.0, Protocol 0, Port 0
59593 11/29/2007 18:40:38.380 SEV=5 IKE/34 RPT=9029 IP2 Group [IP2] Received local IP Proxy Subnet data in ID Payload: Address 192.168.50.0, Mask 255.255.255.0, Protocol 0, Port 0
59596 11/29/2007 18:40:38.380 SEV=5 IKE/66 RPT=8246 IP2 Group [IP2] IKE Remote Peer configured for SA: L2L: Brazil
59597 11/29/2007 18:40:42.970 SEV=6 IKE/201 RPT=1309 IP2 Group [IP2] Duplicate Phase 2 packet detected. Retransmitting last packet.
59599 11/29/2007 18:40:47.960 SEV=6 IKE/201 RPT=1310 IP2 Group [IP2] Duplicate Phase 2 packet detected. Retransmitting last packet.
59602 11/29/2007 18:41:03.960 SEV=6 IKE/1 RPT=1924 IP2 Group [IP2] Removing peer from correlator table failed, no match!
Can anyone let me know what this might point to?