Mailing List Archive

INVALID_EXCHANGE_TYPE wiredness
Hi there,

while vpnc works fine with my machine at home connecting to our PIX-Firewall
from the Internet, it does not seem to do so from my laptop to the same
cisco device using the WLAN connection!

The only difference in the configuration is the target IP of the device.
Here is what I get from the --debug 3 switch:

S1
S2
S3
using interface vpniitb
S4
S4.1
i_cookie: 06f06f45 e5904b1c
i_nonce: 1135b73d 57124c52 693185c1 7992bbac 2ad63bc0
S4.2
dh_public:
3c355442 d50e10ae 447e57ac 20d20409 f0a4f14d 4355ff89 ce00d104 c04ce6c1
6aba8962 20b74061 0fb85b60 86d14e33 380c2138 a441b120 1f1f69ad 87fe5543
57182c6f 94a74899 147b65b8 8f0e11f3 676faf88 d94aea47 f3242e54 289a9958
01aa29cf acf5670e 4140d3c0 11a81fde a8ac94d1 b8c7bd75 506cff3f bbe85159
S4.3

sending: ========================>

BEGIN_PARSE
i_cookie: 06f06f45 e5904b1c
r_cookie: 00000000 00000000
payload: 01
isakmp_version: 10
exchange_type: 04
flags: 00
message_id: 00000000
len: 39020000
PARSING PAYLOAD type: 01
next_type: 04
length: 4c010000
sa.doi: 01000000
sa.situation: 01000000
PARSING PAYLOAD type: 02
next_type: 00
length: 40010000
p.number: 00
p.prot_id: 01
p.spi_size: 00
length: 08
p.spi:
PARSING PAYLOAD type: 03
next_type: 03
length: 28000000
t.number: 00
t.id: 01
t.attributes.type: 0e00
t.attributes.u.attr_16: 0001
t.attributes.type: 0100
t.attributes.u.attr_16: 0700
t.attributes.type: 0200
t.attributes.u.attr_16: 0200
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 28000000
t.number: 01
t.id: 01
t.attributes.type: 0e00
t.attributes.u.attr_16: 0001
t.attributes.type: 0100
t.attributes.u.attr_16: 0700
t.attributes.type: 0200
t.attributes.u.attr_16: 0100
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 28000000
t.number: 02
t.id: 01
t.attributes.type: 0e00
t.attributes.u.attr_16: c000
t.attributes.type: 0100
t.attributes.u.attr_16: 0700
t.attributes.type: 0200
t.attributes.u.attr_16: 0200
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 28000000
t.number: 03
t.id: 01
t.attributes.type: 0e00
t.attributes.u.attr_16: c000
t.attributes.type: 0100
t.attributes.u.attr_16: 0700
t.attributes.type: 0200
t.attributes.u.attr_16: 0100
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 28000000
t.number: 04
t.id: 01
t.attributes.type: 0e00
t.attributes.u.attr_16: 8000
t.attributes.type: 0100
t.attributes.u.attr_16: 0700
t.attributes.type: 0200
t.attributes.u.attr_16: 0200
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 28000000
t.number: 05
t.id: 01
t.attributes.type: 0e00
t.attributes.u.attr_16: 8000
t.attributes.type: 0100
t.attributes.u.attr_16: 0700
t.attributes.type: 0200
t.attributes.u.attr_16: 0100
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 03
length: 24000000
t.number: 06
t.id: 01
t.attributes.type: 0100
t.attributes.u.attr_16: 0500
t.attributes.type: 0200
t.attributes.u.attr_16: 0200
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 03
next_type: 00
length: 24000000
t.number: 07
t.id: 01
t.attributes.type: 0100
t.attributes.u.attr_16: 0500
t.attributes.type: 0200
t.attributes.u.attr_16: 0100
t.attributes.type: 0300
t.attributes.u.attr_16: e9fd
t.attributes.type: 0400
t.attributes.u.attr_16: 0200
t.attributes.type: 0b00
t.attributes.u.attr_16: 0100
t.attributes.type: 0c00
t.attributes.u.lots.length: 0400
t.attributes.u.lots.data: 0020c49b
DONE PARSING PAYLOAD type: 03
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 02
PARSING PAYLOAD type: 00
DONE PARSING PAYLOAD type: 01
PARSING PAYLOAD type: 04
next_type: 0a
length: 84000000
ke.data:
3c355442 d50e10ae 447e57ac 20d20409 f0a4f14d 4355ff89 ce00d104 c04ce6c1
6aba8962 20b74061 0fb85b60 86d14e33 380c2138 a441b120 1f1f69ad 87fe5543
57182c6f 94a74899 147b65b8 8f0e11f3 676faf88 d94aea47 f3242e54 289a9958
01aa29cf acf5670e 4140d3c0 11a81fde a8ac94d1 b8c7bd75 506cff3f bbe85159
DONE PARSING PAYLOAD type: 04
PARSING PAYLOAD type: 0a
next_type: 05
length: 18000000
ke.data: 1135b73d 57124c52 693185c1 7992bbac 2ad63bc0
DONE PARSING PAYLOAD type: 0a
PARSING PAYLOAD type: 05
next_type: 0d
length: 15000000
id.type: 0b
id.protocol: 11
id.port: f401
id.data: 76706e2d 636c6965 6e74732d 31
DONE PARSING PAYLOAD type: 05
PARSING PAYLOAD type: 0d
next_type: 0d
length: 0c000000
ke.data: 09002689 dfd6b712
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 0d
next_type: 00
length: 14000000
ke.data: 12f5f28c 457168a9 702d9fe2 74cc0100
DONE PARSING PAYLOAD type: 0d
PARSING PAYLOAD type: 00
PARSE_OK

exchange_type: 05
S4.4

BEGIN_PARSE
i_cookie: 06f06f45 e5904b1c
r_cookie: 44c104fc e8a25903
payload: 0b
isakmp_version: 10
exchange_type: 05
flags: 00
message_id: 00000000
len: 74010000
PARSING PAYLOAD type: 0b
next_type: 00
length: 58010000
n.doi: 01000000
n.protocol: 01
n.spi_length: 00
n.type: 0e00
n.spi:
n.data:
0400014c 00000001 00000001 00000000 00000000 00000000 00000000 00000000
00000000 00000000 28c41e01 0c892200 3c6d5b01 e89e3701 00000000 b1651000
3c6d5b01 01f40000 fcc41e01 3c6d5b01 04e32200 3c6d5b01 58c41e01 00000000
b4225c04 0400014c 78c41e01 6c532300 01000000 3c6d5b01 04000000 e89e3701
00000000 0cc51e01 fcc41e01 80000000 fcc41e01 0cc51e01 fcc41e01 49032300
90805000 3c6d5b01 84c41e01 04e32200 000001f4 00000000 18c51e01 b5ac2300
fcc41e01 3c6d5b01 e89e3701 01f40000 01f40000 906e5b01 04c51e01 39020000
a09d3701 e0675600 00000000 5f083d00 f40d7100 02002086 3c6d5b01 906e5b01
f401ed00 f4015600 c49e3701 00000000 00000000 00000000 cc9e3701 00000000
39020000 00000000 00000000 e5173d00 3c60ed00 78c51e01 74c51e01 06f06f45
e5904b1c 00000000 00000000
DONE PARSING PAYLOAD type: 0b
PARSING PAYLOAD type: 00
PARSE_OK
vpnc: response was invalid [1]: INVALID_EXCHANGE_TYPE

Whats wrong here?

Sven

--
The source code is not comprehensible
(found in bug section of man 8 telnetd on Redhat Linux)

/me is giggls@ircnet, http://sven.gegg.us/ on the Web
INVALID_EXCHANGE_TYPE wiredness [ In reply to ]
hi,

> while vpnc works fine with my machine at home connecting to our PIX-Firewall
> from the Internet, it does not seem to do so from my laptop to the same
> cisco device using the WLAN connection!
>
> The only difference in the configuration is the target IP of the device.
> Here is what I get from the --debug 3 switch:
[...]
> PARSING PAYLOAD type: 0b
> next_type: 00
> length: 58010000
> n.doi: 01000000
> n.protocol: 01
> n.spi_length: 00
> n.type: 0e00
> DONE PARSING PAYLOAD type: 0b

> Whats wrong here?

hmm.. do you have 3des support an this PIX?
this dump was made without --enable-1des
and the PIX answered "no proposal choosen"

cu
maurice