Сделал файл psk.txt на root:wheel, chmod 600
Стало получше, но работать не хочет! :(Текущая ситуация:
==========
rc.conf:
static_routes="vpn"
route_vpn="192.168.3.0/24 192.168.3.210"
export route_vpn
ipsec_enable="YES"
ipsec_file="/etc/ipsec.conf"
ike_enable="YES"
ike_program="/usr/local/sbin/racoon"
==========
Логи racoon (без debug):
2005-06-14 12:36:28: INFO: main.c:172:main(): @(#)package version freebsd-20030826a
2005-06-14 12:36:28: INFO: main.c:174:main(): @(#)internal version 20001216 sakane@kame.net
2005-06-14 12:36:28: INFO: main.c:175:main(): @(#)This product linked OpenSSL 0.9.7c 30 Sep 2003 (http://www.openssl.org/)
2005-06-14 12:36:28: WARNING: cftoken.l:514:yywarn(): /usr/local/etc/racoon/racoon.conf:46: "support_mip6" it is obsoleted. use "support_proxy".
2005-06-14 12:36:28: INFO: isakmp.c:1358:isakmp_open(): yyy.yyy.yyy.yyy[500] used as isakmp port (fd=5)
2005-06-14 12:38:35: INFO: isakmp.c:894:isakmp_ph1begin_r(): respond new phase 1 negotiation: yyy.yyy.yyy.yyy[500]<=>xxx.xxx.xxx.xxx[500]
2005-06-14 12:38:35: INFO: isakmp.c:899:isakmp_ph1begin_r(): begin Identity Protection mode.
2005-06-14 12:38:35: INFO: vendorid.c:128:check_vendorid(): received Vendor ID: KAME/racoon
2005-06-14 12:38:35: INFO: isakmp.c:2412:log_ph1established(): ISAKMP-SA established yyy.yyy.yyy.yyy[500]-xxx.xxx.xxx.xxx[500] spi:c7c26defb430c8dc:eef11288cc66b2c2
2005-06-14 12:38:35: INFO: isakmp.c:1049:isakmp_ph2begin_r(): respond new phase 2 negotiation: yyy.yyy.yyy.yyy[0]<=>xxx.xxx.xxx.xxx[0]
2005-06-14 12:38:35: ERROR: proposal.c:378:cmpsaprop_alloc(): encmode mismatched: my:Transport peer:Tunnel
2005-06-14 12:38:35: ERROR: ipsec_doi.c:1001:get_ph2approvalx(): not matched
2005-06-14 12:38:35: ERROR: ipsec_doi.c:966:get_ph2approval(): no suitable policy found.
2005-06-14 12:38:35: ERROR: isakmp.c:1063:isakmp_ph2begin_r(): failed to pre-process packet.
2005-06-14 12:38:45: INFO: isakmp.c:1049:isakmp_ph2begin_r(): respond new phase 2 negotiation: yyy.yyy.yyy.yyy[0]<=>xxx.xxx.xxx.xxx[0]
2005-06-14 12:38:45: ERROR: proposal.c:378:cmpsaprop_alloc(): encmode mismatched: my:Transport peer:Tunnel
2005-06-14 12:38:45: ERROR: ipsec_doi.c:1001:get_ph2approvalx(): not matched
2005-06-14 12:38:45: ERROR: ipsec_doi.c:966:get_ph2approval(): no suitable policy found.
2005-06-14 12:38:45: ERROR: isakmp.c:1063:isakmp_ph2begin_r(): failed to pre-process packet.
2005-06-14 12:38:55: INFO: isakmp.c:1049:isakmp_ph2begin_r(): respond new phase 2 negotiation: yyy.yyy.yyy.yyy[0]<=>xxx.xxx.xxx.xxx[0]
2005-06-14 12:38:55: ERROR: proposal.c:378:cmpsaprop_alloc(): encmode mismatched: my:Transport peer:Tunnel
2005-06-14 12:38:55: ERROR: ipsec_doi.c:1001:get_ph2approvalx(): not matched
2005-06-14 12:38:55: ERROR: ipsec_doi.c:966:get_ph2approval(): no suitable policy found.
2005-06-14 12:38:55: ERROR: isakmp.c:1063:isakmp_ph2begin_r(): failed to pre-process packet.
2005-06-14 12:40:37: INFO: isakmp.c:942:isakmp_ph2begin_i(): initiate new phase 2 negotiation: yyy.yyy.yyy.yyy[0]<=>xxx.xxx.xxx.xxx[0]
2005-06-14 12:40:37: ERROR: isakmp_inf.c:776:isakmp_info_recv_n(): unknown notify message, no phase2 handle found.
2005-06-14 12:40:52: ERROR: pfkey.c:741:pfkey_timeover(): xxx.xxx.xxx.xxx give up to get IPsec-SA due to time up to wait.
2005-06-14 12:41:17: INFO: isakmp.c:942:isakmp_ph2begin_i(): initiate new phase 2 negotiation: yyy.yyy.yyy.yyy[0]<=>xxx.xxx.xxx.xxx[0]
2005-06-14 12:41:17: ERROR: isakmp_inf.c:776:isakmp_info_recv_n(): unknown notify message, no phase2 handle found.
2005-06-14 12:41:32: ERROR: pfkey.c:741:pfkey_timeover(): xxx.xxx.xxx.xxx give up to get IPsec-SA due to time up to wait.
2005-06-14 12:42:22: INFO: isakmp.c:942:isakmp_ph2begin_i(): initiate new phase 2 negotiation: yyy.yyy.yyy.yyy[0]<=>xxx.xxx.xxx.xxx[0]
2005-06-14 12:42:22: ERROR: isakmp_inf.c:776:isakmp_info_recv_n(): unknown notify message, no phase2 handle found.
И дальше понеслось... :(
