(racoon 926) Re: Problems talking with Checkpoint-NG

[Satoshi Inoue <inoue@ntes.ipv6.nec.co.jp>]

On Thu, 31 Mar 2005 14:05:06 +0100
Hamie <hamish@travellingkiwi.com> wrote:

> 2005-03-31 11:10:08: INFO: respond new phase 2 negotiation: 
> 192.168.254.254[0]<=>163.166.150.105[0]
> 2005-03-31 11:10:08: ERROR: invalid value of DOI 0x00000038.

The IANA Assigned Number for the IPSEC DOI is 1. So I don't understand
why Checkpoint-NG F/W is sending such a value. It looks like the
negotiation succeeds with racoon as an initiator, but not with racoon
as a responder. Byte ordering problem in ipsec-tools, racoon or
Checkpoint-NG F/W?? I'm not sure. I think you need to do some hacking.