Bonjour,
j'ai un gros problème de configuration d'un VPN Site à Site entre une Livebox Pro V3 et un modem Routeur Zyxel SBG-3300.
En effet, après avoir testé beaucoup de configurations différentes, le VNP ne veut toujours pas se monter. Hors, avant la demande d'adresse IP fixe sur le site du routeur Zyxel, le VPN etait stable (sauf quand l'adresse Ip changait).
Voila ce que j'ai dans les logs du Zyxel :
23 2016 Nov 23 18:57:00 Sec IPSec err phase1 negotiation failed due to time up. 13d7f482608e997b:6ec0c5750976ce84
24 2016 Nov 23 18:56:50 Sec IPSec err last message repeated 1 times in 9 seconds
25 2016 Nov 23 18:56:41 Sec IPSec err notification NO-PROPOSAL-CHOSEN received in unencrypted informational exchange.
26 2016 Nov 23 18:56:40 Sec IPSec notice the packet is retransmitted by 193.248.42.147[500] (1).
27 2016 Nov 23 18:56:40 Sec IPSec err notification NO-PROPOSAL-CHOSEN received in unencrypted informational exchange.
28 2016 Nov 23 18:56:30 Sec IPSec err notification NO-PROPOSAL-CHOSEN received in unencrypted informational exchange.
29 2016 Nov 23 18:56:20 Sec IPSec err last message repeated 1 times in 0 seconds
30 2016 Nov 23 18:56:20 Sec IPSec err notification NO-PROPOSAL-CHOSEN received in unencrypted informational exchange.
31 2016 Nov 23 18:56:20 Sec IPSec notice the packet is retransmitted by 193.248.42.147[500] (1).
32 2016 Nov 23 18:56:10 Sec IPSec err notification NO-PROPOSAL-CHOSEN received in unencrypted informational exchange.
33 2016 Nov 23 18:56:10 Sec IPSec info Adding xauth VID payload.
34 2016 Nov 23 18:56:10 Sec IPSec info an acceptable phase 1 proposal found.
35 2016 Nov 23 18:56:10 Sec IPSec info dh_group = 1536-bit MODP group
36 2016 Nov 23 18:56:10 Sec IPSec info authmethod = pre-shared key
37 2016 Nov 23 18:56:10 Sec IPSec info hashtype = MD5
38 2016 Nov 23 18:56:10 Sec IPSec info encklen = 0
39 2016 Nov 23 18:56:10 Sec IPSec info enctype = 3DES-CBC
40 2016 Nov 23 18:56:10 Sec IPSec info lifebyte = 0
41 2016 Nov 23 18:56:10 Sec IPSec info lifetime = 86400
42 2016 Nov 23 18:56:10 Sec IPSec info trns#=0, trns-id=IKE
43 2016 Nov 23 18:56:10 Sec IPSec info prop#=0, prot-id=ISAKMP, spi-size=0, #trns=1
44 2016 Nov 23 18:56:10 Sec IPSec info received Vendor ID: draft-ietf-ipsec-nat-t-ike-00
45 2016 Nov 23 18:56:10 Sec IPSec info received Vendor ID: draft-ietf-ipsec-nat-t-ike-02
46 2016 Nov 23 18:56:10 Sec IPSec info received Vendor ID: draft-ietf-ipsec-nat-t-ike-02
47 2016 Nov 23 18:56:10 Sec IPSec info received Vendor ID: draft-ietf-ipsec-nat-t-ike-03
48 2016 Nov 23 18:56:10 Sec IPSec info received Vendor ID: RFC 3947
49 2016 Nov 23 18:56:10 Sec IPSec info received Vendor ID: DPD
50 2016 Nov 23 18:56:10 Sec IPSec info received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt
51 2016 Nov 23 18:56:10 Sec IPSec info received Vendor ID: CISCO-UNITY
52 2016 Nov 23 18:56:10 Sec IPSec info begin Identity Protection mode.
53 2016 Nov 23 18:56:10 Sec IPSec info respond new phase 1 negotiation: 193.252.186.174[500]<=>193.248.42.147[500]
Qu'en pensez vous ?
