View Single Post
too's Avatar
Posts: 122 | Thanked: 135 times | Joined on Dec 2009 @ Helsinki
#29
Originally Posted by imagomundi View Post
after "cat" log now says:

response was invalid[2]: (ISAKMP_N_INVALID_PAYLOAD_TYPE)(1)


Other issue/idea: FRITZBox only accepts "aggressive" as mode in phase 1 - does not load vpn config when I change this to "main"

To get vpnc running on Android device connecting to FRITZBox as vpn server the value in vpnc "nat-t-ike-02" (cd60464335df21f87cfdb2fc68b6a448 in binary) had to be changed to "nat-t-ike-03" (binary: 7d9419a65310ca6f2c179d9215529d56) by patching the vpnc binary
Ok, I can find that in the source:
Code:
const unsigned char VID_NATT_02[] = { /* "draft-ietf-ipsec-nat-t-ike-02" */
        0xcd, 0x60, 0x46, 0x43, 0x35, 0xdf, 0x21, 0xf8,
        0x7c, 0xfd, 0xb2, 0xfc, 0x68, 0xb6, 0xa4, 0x48
};
As you know so much, can you also dig the exact configuration
file that Android vpnc client uses. For reference, the current
configuration vpn9c feeds to vpnc is:
Code:
IPSec gateway %s
IPSec ID %s
IPSec secret %s
IKE AuthMode psk
IKE DH Group dh2
Xauth username %s
Xauth password %s
Domain %s
This helps to provide a special image for you to test this --
without too many testing round-trips...

Originally Posted by imagomundi View Post

Hope this helps to help me (and all N9 FRITZBox users that need VPN)

Thanks again
 

The Following User Says Thank You to too For This Useful Post: