ISAKMPD and Vigor2200 IKE

["Andy Fripp" <andy@fieldgrazer.com>]

Hi,

I have been trying to get an IPSec tunnel set-up using
ISAKMPD on an OpenBSD3.1 server and the built in IKE
daemon in a Vigor2200 series router. I have spent several days
on it but have now run out of ideas / configuration options.

The IKE negotiations go through Main Mode fine then start
on the Quick Mode negotiations but then the two ends seem
to get into a series of retransmissions but never establish the final SAs.
I have tried to initiate the connection from either end but the result
is always the same.

I have put my configuration files, ISAKMPD debug output
and tcpdump output onto a web page here:
http://www.fieldgrazer.com/isakmpd/ike.html

Unfortunately the configuration options at the Vigor router
end are rather minimal.  Is it possible that the two IKE
daemons are simply not compatible in their current versions ?

Cheers

Andy